Open teddyxlandlee opened 2 years ago
If you have Forge you can use https://www.curseforge.com/minecraft/mc-mods/log4j2-jndi-exploit-fix
For vanilla Mojang fixed the client if you use their launcher or MultiMC. Servers can use the workaround detailed at https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition
Fabric Loader can be theoretically used by doing a normal 1.18 install with the installer (not the new server launcher), then replacing the server.jar with the 1.7 one and removing the intermediary jar from the class path declaration in META-INF/MANIFEST.MF
in fabric-server-launcher.jar
. There is however currently a Fabric Loader bug that prevents this from working, will be fixed shortly. I'd rather use the other solutions either way.
Due to the Log4j Fatal Bug, Fabric Loader has made a patch onto pre-2.14.1 log4j versions in 0.12.9+.
Fabric Loader has so wonderful cross-version compatibility that it can be used on even Minecraft alpha versions, which could be a possible option to solve the bug on 1.7-1.13.2 and/or on 1.7-1.18 FML (without loading any Fabric mods).
So would you like to share the detailed process to common end users? We're looking forward to your response.