
AsieLib
AsieLib with fixed Bleeding Pipe security vulnerability and other improvements
- Загрузки
- 3K
- Подписчики
- 4
- Обновлён
- 28 декабря 2024 г.
- Лицензия
- MIT
Опубликован 6 июля 2024 г.
AsieLib (with fixed Bleeding Pipe vulnerability)
This repository is a fork of AsieLib for Minecraft 1.7.10 containing an important security vulnerability fix and a few other improvements.
Security vulnerability fix in this fork
This fork fixes the serious Bleeding Pipe vulnerability (only for this mod itself, not for others - many mods are affected!) by simply removing the affected method, only leaving an error message explaining that.
This means it might break mods that use the affected Base64#decodeToObject method. However, to my knowledge, at least none of asie's popular mods utilize it.
Please make sure that you're not affected through other mods. A good start is to also install the serializationisbad mod and/or check out their list of affected mods.
If AsieLib is the only affected mod that you're using, switching to this fork should suffice.
Other improvements of this fork
- Fixed the bug of Showcase lids (from the Statues Mod) never closing (asiekierka/Statues#15) (thanks @TCLProject)
- Fixed potential issues with other blocks that have inventories that use AsieLib (thanks @TCLProject)
- Added a Simplified Chinese localization (thanks @M3MEMonster)
License
The license is the same as in the original version and can be found here.
Ченджлог
0.5.2Релиз1.7.10 · 28 декабря 2024 г.
- Added safeguards to prevent crashes to the "Fixed potential issues" code implemented in v0.5.1 (Fixed #1)
0.5.1Релиз1.7.10 · 11 августа 2024 г.
These fixes work for both my fork of the Statues Mod as well as the original version.
- Statues Mod: Fixed the Showcase lid not closing (asiekierka/Statues#15) (thanks to @TCLProject's StatuesMod Fix for the fix)
- Fixed potential issues with other blocks that have inventories that use AsieLib (thanks @TCLProject)
- Added a Simplified Chinese localization (thanks @M3MEMonster)
- AsieLib no longer supports Java 6, which really shouldn't cause any problems.
0.5.0Релиз1.7.10 · 6 июля 2024 г.
- Fixed the Bleeding Pipe security vulnerability by simply removing the affected method.
- See README for more details.
Комментарии
Загружаем…