Page 5 of 5

Re: General Zedwork Changelog

PostPosted: Fri Sep 11, 2020 6:44 pm
by Zedwick
Network
  • Added 1.16.3 client support

Lobby
  • Added 1.16.3 client support

Re: General Zedwork Changelog

PostPosted: Fri Jan 08, 2021 1:57 pm
by Zedwick
I forgot to mention 1.16.4 support, but worth also mentioning that we've patched a critical crash exploit across all of our servers before it could be used on Zedwork.

Network
  • Added 1.16.4 client support

Lobby
  • Added 1.16.4 client support

General
  • Patched critical crash exploit

Re: General Zedwork Changelog

PostPosted: Wed Jun 09, 2021 12:10 am
by Zedwick
Network
  • Fixed compatibility issues with java 16
  • Added 1.17 client support

Lobby
  • Added 1.17 client support

Re: General Zedwork Changelog

PostPosted: Tue Jul 06, 2021 11:22 pm
by Zedwick
Network
  • Added 1.17.1 client support

Lobby
  • Added 1.17.1 client support

Re: General Zedwork Changelog

PostPosted: Thu Dec 09, 2021 10:52 pm
by Zedwick
Earlier this evening I learned of a serious exploit affecting all Minecraft servers. I have applied mitigations across all Zedwork servers, along with more robust patches where possible.

I have no evidence it has been exploited on Zedwork, but I have heard reports of it being actively exploited on other servers.

Changelog
  • Applied mitigations/patches for RCE vulnerability

Re: General Zedwork Changelog

PostPosted: Fri Dec 10, 2021 3:42 am
by Zedwick
The following no longer applies, as Mojang have issued a fix which has been distributed to you all via your Minecraft launcher. The fix applies to all supported versions of vanilla Minecraft, however if you are running a modded client you will need to be responsible for ensuring it has been patched by your modded client (fabric/forge/optifine etc.) authors.

Original warning is quoted below.

Unfortunately this vulnerability does not just affect servers, but it can be used to run code on player's computer's also.

If you are on a multiplayer Minecraft server, any other player may be able to hack your computer by typing a short message into chat.

I have added mitigations to protect you from this issue on Zedwork. The instructions sent in chat will not be visible to your client, and therefore will not initiate the exploit on your machine.

For the time being, I recommend you avoid playing on any other multiplayer Minecraft servers. I'm sure Mojang will have a fix for this exploit out soon, but until then you can protect yourself by not playing on Minecraft servers unless you can be sure they have applied fixes to protect you.

Changelog
  • Mitigated RCE vulnerability for connected clients

Re: General Zedwork Changelog

PostPosted: Sat Dec 18, 2021 9:11 am
by Zedwick
Unfortunately I need to disable Zestygames temporarily, as it needs rewriting in order to effectively mitigate the latest RCE vulnerability. I do not yet know when it will return.

changelog
  • Temporarily disabled Zestygames

Re: General Zedwork Changelog

PostPosted: Tue Mar 01, 2022 12:39 am
by Zedwick
Network
  • Added 1.18.2 client support

Lobby
  • Added 1.18.2 client support

Re: General Zedwork Changelog

PostPosted: Wed Jun 08, 2022 2:47 pm
by Zedwick
Network
  • Added 1.19 client support

Lobby
  • Added 1.19 client support