A Forge mod that implements SpongeAPI
This release fixes a spawn related issue introduced in v7.4.6
This release fixes an issue introduced in v7.4.5 where errors were printed to the console when a player logged in.
This release patches the H2 database driver to depend against a similar remote code execution vulnerability.
Also includes the following fixes:
Server owners will want to download spongeforge-1.12.2-2838-7.4.5.jar
This release is identical to SpongeForge 7.4.3, released only for parity with SpongeVanilla 7.4.4.
This build strengthens protections against clients that were introduced in v7.4.2. Users should use Forge version 2860 with this build.
If you updated to 2859 suddenly found that plugins stopped logging to the console, if affected, stop your server and delete the directory libraries/org/apache/logging/log4j/log4j-slf4j18-impl
. This will have no ill effects on your server.
Server owners should direct their players to install patched versions of the Minecraft client, where appropriate. For vanilla players, this is as simple as restarting their vanilla client: see https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition. For Forge users, that means updating their clients to use Forge build 2859 or later.
USERS SHOULD UPDATE TO THIS SERVER VERSION AS SOON AS POSSIBLE
Server owners should download spongeforge-1.12.2-2838-7.4.3
This is an emergency patch for 7.4.0 to work around an exploit in vanilla Minecraft. Anyone who attempts to send a potentially vulnerable chat message will be told that they cannot send it.
USERS SHOULD UPDATE TO THIS SERVER VERSION AS SOON AS POSSIBLE
Note: this works with Forge 2855.
IN ADDITION, we strongly recommend that everyone adds the flag -Dlog4j2.formatMsgNoLookups=true
to their server/client startup parameters (on the client, you can do this in the launcher by going to installations at the top, hovering over the version of Minecraft you're running, selecting "Edit", the "More Options", then adding the flag in there.)
Full Changelog: https://github.com/SpongePowered/SpongeForge/compare/v7.4.0...v7.4.1
Server owners should download spongeforge-1.12.2-2838-7.4.2.jar
This release has a bug - use 7.4.2 instead
This is an emergency patch for 7.4.0 to work around an exploit in vanilla Minecraft. Anyone who attempts to send a potentially vulnerable chat message will be told that they cannot send it.
USERS SHOULD UPDATE TO THIS SERVER VERSION AS SOON AS POSSIBLE
Note: this works with Forge 2855.
IN ADDITION, we strongly recommend that everyone adds the flag -Dlog4j2.formatMsgNoLookups=true
to their server/client startup parameters (on the client, you can do this in the launcher by going to installations at the top, hovering over the version of Minecraft you're running, selecting "Edit", the "More Options", then adding the flag in there.)
Full Changelog: https://github.com/SpongePowered/SpongeForge/compare/v7.4.0...v7.4.1
This is the final release of SpongeForge for Minecraft 1.12.2.
Note: this works with Forge 2855.
Full Changelog: https://github.com/SpongePowered/SpongeForge/compare/v7.3.0...v7.4.0
This contains the full release of SpongeAPI 7.3.
Additional fixes and features are:
DamageEntityEvent
cancels all damage effects.ConnectedDirectionsData
to some blocks will now work as intended.CraftItemEvent.Preview
.CollideEntityEvent
containing the wrong cause.UserStorageService
sometimes throwing exceptions.ClassCastException
for AreaEffectCloudProcessor
.No big things to worry about this time, but here are some things that have changed:
LaunchProjectileEvent
will now be fired if no-one is listening to SpawnEntityEvent
but a plugin is listening to LaunchProjectileEvent
FirstAid
that cancel the LivingHurtEvent
to do their own damage calculations.User
s from the UserStorageService
/invsee
causing User {} is not initialized
errors to bring down the server.User {} is not initialized
errors occur, the server no longer crashes.Server#copyWorld()
now registers the world.GenericArguments#allOf
chunk-load
logging is enabled, queueing a chunk for load is now logged.We also added the following features that are slated for API 7.3. They are available now if you build against API 7.3 snapshots, but note that the APIs are not yet in a release build of API 7 and so are subject to change:
SaveChunkEvent
.select
and whilst
instead of stopFilter
and skipFilter
in BlockRay
.METADATA_ONLY
, which saves everything about a world, but not its chunks.