Highlights
- Add opt-in
PY15 SECURITY_ADVISORYexchange for directly authenticated pyCluster peers (#276). Reports contain bounded public IP or IPv6 /64 login-abuse summaries, are retained for 72 hours, and appear in System Operator Telemetry. Peer reports never apply blocks automatically; a System Operator can explicitly block locally for a chosen duration, unblock, or dismiss. - Reject a second
PY00 HELLOon an active peer session so it cannot reset the receive sequence and enable replay of bound frames. - Keep
show/ai3i,show/n9jr,show/dxspider, andshow/spoutavailable as easter eggs while removing them from command discovery and capability counts. - Clarify command descriptions across the catalog, including MFA, protocol acknowledgements, QRZ lookup, and stored-state commands.
Operational notes
- PY15 sharing defaults to off. Enable Security advisories (PY15) in Node Settings > pyCluster Protocol on both peers, then reconnect those links to negotiate the capability.
- Advisory data is informational. Existing address blocks and blocks applied from advisories use the local telnet and web access policy. A new advisory block must have an explicit duration of 1–10080 minutes.
- This release was not deployed or validated against a live peer network before publication.
Verification
- 770 default tests and 49 socket listener tests passed: 819 total.