General Zedwork Changelog

[Zedwick]

Network

• Added 1.16.3 client support

Lobby

• Added 1.16.3 client support

[Zedwick]

I forgot to mention 1.16.4 support, but worth also mentioning that we've patched a critical crash exploit across all of our servers before it could be used on Zedwork.

Network

• Added 1.16.4 client support

Lobby

• Added 1.16.4 client support

General

• Patched critical crash exploit

[Zedwick]

Network

• Fixed compatibility issues with java 16
• Added 1.17 client support

Lobby

• Added 1.17 client support

[Zedwick]

Network

• Added 1.17.1 client support

Lobby

• Added 1.17.1 client support

[Zedwick]

Earlier this evening I learned of a serious exploit affecting all Minecraft servers. I have applied mitigations across all Zedwork servers, along with more robust patches where possible.

I have no evidence it has been exploited on Zedwork, but I have heard reports of it being actively exploited on other servers.

Changelog

• Applied mitigations/patches for RCE vulnerability

[Zedwick]

The following no longer applies, as Mojang have issued a fix which has been distributed to you all via your Minecraft launcher. The fix applies to all supported versions of vanilla Minecraft, however if you are running a modded client you will need to be responsible for ensuring it has been patched by your modded client (fabric/forge/optifine etc.) authors.

Original warning is quoted below.

Unfortunately this vulnerability does not just affect servers, but it can be used to run code on player's computer's also.

If you are on a multiplayer Minecraft server, any other player may be able to hack your computer by typing a short message into chat.

I have added mitigations to protect you from this issue on Zedwork. The instructions sent in chat will not be visible to your client, and therefore will not initiate the exploit on your machine.

For the time being, I recommend you avoid playing on any other multiplayer Minecraft servers. I'm sure Mojang will have a fix for this exploit out soon, but until then you can protect yourself by not playing on Minecraft servers unless you can be sure they have applied fixes to protect you.

Changelog

• Mitigated RCE vulnerability for connected clients

[Zedwick]

Unfortunately I need to disable Zestygames temporarily, as it needs rewriting in order to effectively mitigate the latest RCE vulnerability. I do not yet know when it will return.

changelog

• Temporarily disabled Zestygames

[Zedwick]

Network

• Added 1.18.2 client support

Lobby

• Added 1.18.2 client support

[Zedwick]

Network

• Added 1.19 client support

Lobby

• Added 1.19 client support