search

AllTheMods / ATM-3

Official ATM3 Repo
https://allthemods.net/
49 stars 29 forks source link

Update forge to fix the log4j RCE #994

Closed TheFrenchGhosty closed 2 years ago

TheFrenchGhosty commented 2 years ago

ATM-6 has had its forge version updated, but ATM-3 is still running a version that is affected by log4shell, it would be nice if you could update it (or at most add the workaround that disable the interpretation of the RCE).

Pelotrio commented 2 years ago

I have planned to do so but I just hadn't had the time yet. I am also unsure if I should push additional updates or just update the forge version. As this is a legacy pack and I am the only one working on it I hope this is understandable.

TheFrenchGhosty commented 2 years ago

@Pelotrio Sure, this is perfectly understandable, I just think it's a bad idea to leave the modpack vulnerable to the issue.

I'm personally thinking of opening a server (on PussTheCat.org) for this modpack, since 1.12.2 has a lot of mods not available on future version. It would be nice if you kept it updated, but that's up to you.

Pelotrio commented 2 years ago

@TheFrenchGhosty Yes, it's definitely the plan to keep it updated. I may push an update with just the Forge version and a few mod updates, though I have something bigger planned.

Pelotrio commented 2 years ago

ba4dd18e8faa74000b541a483953100440586f64 this will get pushed next update

Pelotrio commented 2 years ago

@TheFrenchGhosty I forgot to notify you but the next update is out.