HHVM 3.23.4, 3.21.5, and 3.18.7

Today we’re releasing HHVM 3.23.4, 3.21.5, and 3.18.7. These releases contain security improvements:

• Ensure url parsing complies with rfc3986 to get the right hostname
• Prevent illegal write/read access caused by gdImageAALine overflow
• preg_quote() does not quote # control character
• Fix memory leak in libgd
• Accelerated Thrift: Protect against infinte loop in deserialization
• ext_zend_compat: Fix potential memory issue with USE_ZEND_ALLOC=0