Skip to content

v1.3.4 — security + stability

Choose a tag to compare

View all tags
@LxveAce LxveAce released this 07 Jul 17:29
· 24 commits to main since this release
v1.3.4
50d768d

v1.3.4 — security + stability

This release ships fixes the previously-published v1.3.3 binaries did not have — most importantly a
flasher-panel crash and two remote-reachable web-UI holes. Updating is recommended.

Highlights

  • Fixed a flasher-panel crash (QSpinBox NameError) that broke the Qt flasher panel in the v1.3.3 binaries.
  • Closed two remote-reachable web holes — a wildcard CORS policy and a CR/LF command-injection path in the
    web UI / serial bridge.
  • Hardened the untrusted web path — argument validation, an atomic esptool busy-claim, a non-localhost bind
    warning, and a log dir confined under $HOME.
  • Controller thread-safety — send() survives a concurrent disconnect; bounded serial writes; guarded
    reconnect; capped read buffer.
  • Flasher robustness — bounded chip detection + esptool child reap; P4/H4 bootloader offset 0x2000, C61 0x0.
  • Packaging: suicide optional-deps extra; LxveLabs contact rebrand + PCBWay hardware note.

Downloads

Standalone binaries for Windows x64, Linux x64, Linux arm64, macOS arm64 are attached. They are unsigned,
so SmartScreen (Windows) / Gatekeeper (macOS) will warn — that's expected for an independent build. Verify with the
checksums below.

Verify

sha256sum -c SHA256SUMS.txt

480d214bbf4fb47f244710593c04214a595ee9a4a8fc99af93c93b8f2a76d984  headless-marauder-v1.3.4-windows-x64.exe
6fd0651f3c8f257238045dacd2d2a0d3c4a7ddb872bc46d1fc6e74e75370c241  headless-marauder-v1.3.4-linux-x64
a740f1267b878e41132c1e419a19882bf7c212f7d5250462d2d6df08b1a50422  headless-marauder-v1.3.4-linux-arm64
36f8a90649bda2532b60f24efdf485d01809bb636dfc6582e6219d0b7cb14499  headless-marauder-v1.3.4-macos-arm64

VirusTotal

Unsigned PyInstaller binaries normally show a couple of heuristic flags — the low ratio + report link is the trust signal.

File Detections Report
headless-marauder-v1.3.4-windows-x64.exe 2 / 73 VirusTotal
headless-marauder-v1.3.4-linux-x64 0 / 73 VirusTotal
headless-marauder-v1.3.4-linux-arm64 0 / 73 VirusTotal
headless-marauder-v1.3.4-macos-arm64 1 / 73 VirusTotal

Full changelog: see CHANGELOG.md → [1.3.4].
Built by LxveAce · a LxveLabs project · authorized, lawful use only.

Assets 7
Loading