Core:
    Fixed bug #81068 (Double free in realpath_cache_clean()).
    Fixed bug #76359 (open_basedir bypass through adding "..").
    Fixed bug #81090 (Typed property performance degradation with .= operator).
    Fixed bug #81070 (Integer underflow in memory limit comparison).
    Fixed bug #81122 (SSRF bypass in FILTER_VALIDATE_URL). (CVE-2021-21705)
Bzip2:
    Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
OpenSSL:
    Fixed bug #76694 (native Windows cert verification uses CN as sever name).
PDO_Firebird:
    Fixed bug #76448 (Stack buffer overflow in firebird_info_cb). (CVE-2021-21704)
    Fixed bug #76449 (SIGSEGV in firebird_handle_doer). (CVE-2021-21704)
    Fixed bug #76450 (SIGSEGV in firebird_stmt_execute). (CVE-2021-21704)
    Fixed bug #76452 (Crash while parsing blob data in firebird_fetch_blob). (CVE-2021-21704)
Standard:
    Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").