Liam Fry
Assigned
Reported
Comments
1.13.1 still has this issue.
That is very sad. This undocumented and unannounced change is a game-breaking situation for the server environment I run. I have several whitelisted vanilla servers used in a K-12 teaching environment in which either a command block or an external process (via the game console) gives players customized items that are then used in-game while in "survival" mode. One such item is a sign with NBT data specifying text and/or clickEvent actions and/or lore.
I have been unable to locate any reported issue that suggests BlockEntityTag is a security issue in survival mode. It's unclear how this undocumented change might address such an issues. The only legitimate way to receive a modified item, i.e. one with NBT tags set, is via the server console or a command block. Both of these mechanisms are already privileged and/or controlled: the former requiring direct access to the server and the latter requiring creative mode. This is a significant change, one that I am surprised was not disclosed.
[10:34:44] [Server thread/WARN]: Fetching packet for removed entity awb['Air'/162441, l='world', x=9676.83, y=64.00, z=7064.37]This happens to me on vanilla 1.15.2
I, too, have never spawned a Wither. This is not related to explosions for me because it's happening where there are no explosions. It is happening in my free-range chicken farm. Perhaps it's related to despawning eggs? When it does happen, it's always at the same location, ±2 blocks, always along a fence line where the chickens congregate.