Ice 3.8.3 with Reliability and Security Fixes

[pepone]

We are pleased to announce the Ice 3.8.3 release!

This patch release resolves a large number of issues across all the language mappings and Ice services. Most of them come from security and correctness audits of the entire Ice codebase performed with AI tools, and their fixes make Ice more reliable and more robust, in particular when processing invalid or malicious data received from the network.

The release also adds support for OpenSSL 4.0 and Xcode 27.

Before upgrading, please note:

• DataStorm: DataStorm in Ice 3.8.3 is not wire-compatible with DataStorm in earlier Ice 3.8 releases. A 3.8.3 node does not communicate with nodes running Ice 3.8.0 through 3.8.2, so you need to upgrade all the DataStorm nodes in a deployment together. Source and binary compatibility are not affected: you can upgrade without recompiling your application.

• Glacier2: The address filters (Glacier2.Filter.Address.Accept and Glacier2.Filter.Address.Reject) now match the host name in full. For example, the rule api.example.com no longer matches notapi.example.com. If one of your rules relied on the previous behavior, prepend or append * to restore a suffix or prefix match.

The Release Notes highlight the main changes, the Changelog provides all the details, and the 3.8.3 milestone lists all the resolved issues.

All the best,
The ZeroC Team