HHVM 3.23.3, 3.21.4, and 3.18.6

Today we’re releasing HHVM 3.23.3, 3.21.4, and 3.18.6. These releases contain:

• security improvements (listed below)
• a fix for several MacOS crashes (3.23.3 and 3.21.4 only)

Security Improvements

• Prevent write out of bounds at number_format
• memcpy negative parameter in _bc_new_num_ex
• Fix PHP #75075 unpack with X* causes infinite loop
• Fix PHP #75139 suspicious ternary
• Fix PHP 74435 - Buffer over-read into uninitialized memory
• Fix PHP 74651 - EVP_SealInit can return -1