Core: Fixed bug #69537 (__debugInfo with empty string for key gives error).
Fixed bug #71841 (EG(error_zval) is not handled well).
BCmath: Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition).
Curl: Fixed bug #71831 (CURLOPT_NOPROXY applied as long instead of string).
Date: Fixed bug #71889 (DateInterval::format Segmentation fault).
EXIF: Fixed bug #72094 (Out of bounds heap read access in exif header processing).
GD: Fixed bug #71952 (Corruption inside imageaffinematrixget).
Fixed bug #71912 (libgd: signedness vulnerability).
Intl: Fixed bug #72061 (Out-of-bounds reads in zif_grapheme_stripos with negative offset).
OCI8: Fixed bug #71422 (Fix ORA-01438: value larger than specified precision allowed for this column).
ODBC: Fixed bug #63171 (Script hangs after max_execution_time).
Opcache: Fixed bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER).
PDO: Fixed bug #52098 (Own PDOStatement implementation ignore __call()).
Fixed bug #71447 (Quotes inside comments not properly handled).
Postgres: Fixed bug #71820 (pg_fetch_object binds parameters before call constructor).
SPL: Fixed bug #67582 (Cloned SplObjectStorage with overwritten getHash fails offsetExists()).
Standard: Fixed bug #71840 (Unserialize accepts wrongly data).
Fixed bug #67512 (php_crypt() crashes if crypt_r() does not exist or _REENTRANT is not defined).
XML: Fixed bug #72099 (xml_parse_into_struct segmentation fault).