Перейти к содержимому
Mineforgian

AsieLib

AsieLib with fixed Bleeding Pipe security vulnerability and other improvements

Загрузки
3K
Подписчики
4
Обновлён
28 декабря 2024 г.
Лицензия
MIT

Опубликован 6 июля 2024 г.

AsieLib (with fixed Bleeding Pipe vulnerability)

This repository is a fork of AsieLib for Minecraft 1.7.10 containing an important security vulnerability fix and a few other improvements.

Security vulnerability fix in this fork

This fork fixes the serious Bleeding Pipe vulnerability (only for this mod itself, not for others - many mods are affected!) by simply removing the affected method, only leaving an error message explaining that.

This means it might break mods that use the affected Base64#decodeToObject method. However, to my knowledge, at least none of asie's popular mods utilize it.

Please make sure that you're not affected through other mods. A good start is to also install the serializationisbad mod and/or check out their list of affected mods.

If AsieLib is the only affected mod that you're using, switching to this fork should suffice.

Other improvements of this fork

  • Fixed the bug of Showcase lids (from the Statues Mod) never closing (asiekierka/Statues#15) (thanks @TCLProject)
  • Fixed potential issues with other blocks that have inventories that use AsieLib (thanks @TCLProject)
  • Added a Simplified Chinese localization (thanks @M3MEMonster)

License

The license is the same as in the original version and can be found here.

Ченджлог

0.5.2Релиз1.7.10 · 28 декабря 2024 г.
  • Added safeguards to prevent crashes to the "Fixed potential issues" code implemented in v0.5.1 (Fixed #1)
0.5.1Релиз1.7.10 · 11 августа 2024 г.

These fixes work for both my fork of the Statues Mod as well as the original version.

  • Statues Mod: Fixed the Showcase lid not closing (asiekierka/Statues#15) (thanks to @TCLProject's StatuesMod Fix for the fix)
  • Fixed potential issues with other blocks that have inventories that use AsieLib (thanks @TCLProject)
  • Added a Simplified Chinese localization (thanks @M3MEMonster)
  • AsieLib no longer supports Java 6, which really shouldn't cause any problems.
0.5.0Релиз1.7.10 · 6 июля 2024 г.
  • Fixed the Bleeding Pipe security vulnerability by simply removing the affected method.
    • See README for more details.

Комментарии

Загружаем…