PHP Virtual Machine Releases HHVM 3.25.3, 3.24.7 and 3.21.11 Versions

  

The PHP virtual machine HHVM has released versions 3.25.3, 3.24.7 and 3.21.11, all of which contain important security improvements:

• CVE-2018-6335: Potential DoS attack when Proxygen handles HTTP2 header padding

• CVE-2018-5771: PHP Bug #75571: gdImageCreateFromGifCtx() has a potential infinite loop

• PHP Bug #73957: imagescale() has signed integer conversion

• CVE-2017-10989, CVE-2017-13685, CVE-2017-15286, CVE-2018-8740: Multiple issues in SQLite

also

• Several portability improvements have been supported to make it easier to build LTS branches on macOS

• 3.24 and 3.25 are currently being packaged for Ubuntu 18.04 (Bionic Beaver)

Release homepage: https://hhvm.com/blog/2018/05/04/hhvm-3.25.3.html
Source code download: https://github.com/facebook/hhvm/releases

HipHopVM (HHVM) is a virtual machine introduced by Facebook to execute PHP code. It is a PHP JIT (Just-In-Time) compiler, which has the advantages of generating fast code and instant compilation.