Minecraft@TheParadox.Us

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== What's a CVE, Anyway ======

//and why did it just break my pickax?//

10 Dec 2021

Our version of Minecraft is affected by [[https://nvd.nist.gov/vuln/detail/CVE-2021-44228|CVE-2021-44228]]. A "CVE" is what happens when programmers make bad decisions… like permitting a logging framework to resolve URLs, connect to servers, download content, and then to execute that content as instructions.

''theparadox.us'' has many defenses against intrusion. While there is no evidence that the server was actually compromised, we will carefully sanitize our high-contact surfaces to ensure that nothing nasty can remain. **Expect a day or two of downtime as we get this sorted out.**

It is unclear if Mojang will release any further patches to Minecraft 1.16. It is also unclear if any of the existing mitigations actually make the old code safe. We may be required to update to [[https://minecraft.fandom.com/wiki/Java_Edition_1.18|Minecraft 1.18]].

===== 22 Dec 2021: Service Restored! =====

Just in time for the holidays, all services are now operational. Better late than never, right? Security patches have allowed us to remain on Minecraft 1.16 for now, and everything should be right where you left it.

If you can't remember //where// that is, that's your own problem.

Play on… but first, learn how to protect yourself from the [[https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition|compuvirus]].

Minecraft@TheParadox.Us

User Tools

Site Tools

Page Tools