Use the zero argument form of super() in examples for Python3 docs. (GH-22314) (GH-25639)

(cherry picked from commit 52cd6d5e1b2bece0d8efb58b1af41071c914ebe6)

Co-authored-by: Andre Delfino <adelfino@gmail.com>

[3.8] bpo-28577: Special case added to IP v4 and v6 hosts for /32 and /128 networks (GH-18757) (#25536)

The `.hosts()` method now returns the single address present in a /32 or /128 network..
(cherry picked from commit 8e9c47a947954c997d4b725f4551d50a1d896722)

Co-authored-by: Pete Wicken <2273100+JamoBox@users.noreply.github.com>

Fix thread locks in zlib module may go wrong in rare case (#22132)

Setting `next_in` before acquiring the thread lock may mix up compress/decompress state in other threads.

bpo-41661: Document os.path.relpath() exception on Windows with different drives (GH-25346) (#25367)

(cherry picked from commit 67c0b3d89c4da9750fdb43fc66d3924681b22d2e)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

bpo-17305: Link to the third-party idna package. (GH-25208) (#25211)

So long as we don't have idna2008 in the standard library, we should at least point people to the third-party solution.
(cherry picked from commit 1d023e374cf96d143b065242131ddc9b889f9a1e)

Co-authored-by: Gregory P. Smith <greg@krypto.org>

[3.8] bpo-34463: Make python tracebacks identical to C tracebacks for (#23899)

* [3.8] bpo-34463: Make python tracebacks identical to C tracebacks for
SyntaxErrors without a lineno (GH-23427)

(cherry picked from commit 069560b1171eb6385121ff3b6331e8814a4e7454)

Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>
* 📜🤖 Added by blurb_it.

* added missing newline in test

Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>

bpo-42924: Fix incorrect copy in bytearray_repeat (GH-24208) (#24212)

Before, using the * operator to repeat a bytearray would copy data from the start of
the internal buffer (ob_bytes) and not from the start of the actual data (ob_start).
(cherry picked from commit 61d8c54f43a7871d016f98b38f86858817d927d5)

Co-authored-by: Tobias Holl <TobiasHoll@users.noreply.github.com>

bpo-43938: improve dataclasses.FrozenInstanceError documentation (GH-25603) (GH-25636)

(cherry picked from commit 8a307e488d596914a7a5df6b2fdd945f8ce81e69)

Co-authored-by: Llandy Riveron Del Risco <llandy3d@gmail.com>
Co-authored-by: Llandy Riveron Del Risco <llandy3d@gmail.com>

Doc: Fix the array.fromfile method doc (GH-22037) (GH-25631)

The check about the f argument type was removed in this commit:
https://github.com/python/cpython/commit/2c94aa567e525c82041ad68a3174d8c3acbf37e2

Thanks for Pedro Arthur Duarte (pedroarthur.jedi at gmail.com) by the help with
this bug.
(cherry picked from commit bd25bcd37a3a41a0e08208e969f0c02287850c61)

Co-authored-by: Adorilson Bezerra <adorilson@gmail.com>
Co-authored-by: Adorilson Bezerra <adorilson@gmail.com>

[3.8] bpo-38820: Old OpenSSL 3.0.0 releases are in /old/3.0/ (GH-25624) (GH-25627)

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 3c586ca500854476e6eff06713236faff233d035)

Co-authored-by: Christian Heimes <christian@python.org>
Automerge-Triggered-By: GH:tiran

Update asyncio-subprocess.rst (GH-21680) (GH-25622)

(cherry picked from commit 3c4850e222388889426e250ff43308e4802dc582)

Co-authored-by: Gabriel R F <github@gabrf.com>

documentation: clarification about the function remove in os library (GH-19024) (GH-25618)

(cherry picked from commit b6daab2f676de1773d8f35fb362fe4c57449301d)

Co-authored-by: Etienne Gautier <etienne.gautier@outlook.com>

Quick pydoc update to smtplib.py (GH-22292) (GH-25616)

Fixing minor mistake in the quotes around a couple of arguments for the constructor of the class `SMTP`, in smtplib.py.
(cherry picked from commit b3dec6f9ede35fc3bf7ae1baf0aa5f2ce1b6bf9d)

Co-authored-by: uy-rrodriguez <5296200+uy-rrodriguez@users.noreply.github.com>

bpo-43534: Fix the turtle module working with multiple root windows GH-25594

(cherry picked from commit 8af929fc76f21fb123f6a47cb3ebcf4e5b758dea)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

Fix broken links and improve stand-alone tools list in FAQ GH-25610

(cherry picked from commit d28b34695301ec99a9334ad8d69b6092f4f703d5)

Co-authored-by: Andre Delfino <adelfino@gmail.com>

Fix id of 'Internet Message Format' RFC in email doc GH-25614

Previous ID (5233) refers to "Sieve Email Filtering: Subaddress
Extension". It seems that the actual reference should be "Internet
Message Format" RFC 5322 (https://tools.ietf.org/html/rfc5322).

(The typo probably comes from commit 29d1bc0842 in which the ID of
this RFC got updated from the obsolete 2822.)

Co-authored-by: Ambrose Chua <ambrose@hey.com>
(cherry picked from commit cb5c802dcf8851663c4eac5d73f968f626a3a1dc)
Co-authored-by: Denis Laxalde <denis@laxalde.org>

Fix copy.Error casing in documentation GH-22004 (#25612)

(cherry picked from commit 0d930f108cb8ba66f54197175c1fba0c38253e4a)

Co-authored-by: Andre Delfino <adelfino@gmail.com>

Remove mention of dst parameter from description of os.lstat() (GH-24704)

It looks like it was accidentally copy-pasted in
6fa7aada9bd3616e0beeb266e818497b2ec1c859.
(cherry picked from commit 7f8e072c6dc88d6973d81f8fd572c04c88e7e3d7)

Co-authored-by: Sergey Fedoseev <fedoseev.sergey@gmail.com>

Fix a typo in datamodel reference document (GH-24930)

(cherry picked from commit a1a5e3c4c83c3e3fe24c96ae22dfdedc7e23a1bb)

Co-authored-by: Géry Ogam <gery.ogam@gmail.com>

BaseHTTPRequestHandler, that path includes query (GH-25597)

* Clarify, for BaseHTTPRequestHandler, that path includes query

Co-authored-by: David Jones <drj@pobox.com>
(cherry picked from commit a89d8a94a0dd0bd45349efad6d5ad68641f4ff9a)

Co-authored-by: Senthil Kumaran <senthil@uthcode.com>

[3.9] bpo-43655: Tkinter and IDLE dialog windows are now recognized as dialogs by window managers on macOS and X Window (GH-25187). (GH-25588) (GH-25592)

(cherry picked from commit 3bb3fb3be09d472a43cdc3d9d9578bd49f3dfb8c)
(cherry picked from commit 9a165399aec930f27639dd173426ccc33586662b)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

bpo-43534: Make dialogs in turtle.textinput() and turtle.numinput() transitient again (GH-24923)

(cherry picked from commit b5adc8a7e5c13d175b4d3e53b37bc61de35b1457)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

[3.8] bpo-43930: Update bundled pip to 21.1 and setuptools to 56.0.0 (GH-25576) (GH-25579)

Update bundled pip to 21.1 and setuptools to 56.0.0.
(cherry picked from commit 196983563d05e32d2dcf217e955a919f9e0c25e1)

Co-authored-by: Stéphane Bidoul <stephane.bidoul@acsone.eu>

bpo-43607: Fix urllib handling of Windows paths with \\?\ prefix (GH-25539)

(cherry picked from commit 3513d55a617012002c3f82dbf3cec7ec1abd7090)

Co-authored-by: Steve Dower <steve.dower@python.org>

[3.8] bpo-43920: Make load_verify_locations(cadata) error message consistent (GH-25554) (GH-25556)

Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit b9ad88be0304136c3fe5959c65a5d2c75490cd80)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-43856: Add a versionadded directive to the importlib.metadata docs (GH-25445)

Use a versionadded directive to generate the text "New in version
3.8." (to match with the documentation of other modules).

Automerge-Triggered-By: GH:jaraco
(cherry picked from commit adf24bd835)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

Reformat idlelib colorizer (GH-25479)

Also replace if-then and and-or with conditional expressions.

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>
(cherry picked from commit 702a0885ba3636959d4c176797814937c497b986)

Co-authored-by: E-Paine <63801254+E-Paine@users.noreply.github.com>

bpo-38822: Check specifically for a drive, not just a colon (GH-25540)

(cherry picked from commit e07d8098892e85ecc56969d2c9a5afb3ea33ce8f)

Co-authored-by: Steve Dower <steve.dower@python.org>

bpo-35306: Avoid raising OSError from pathlib.Path.exists when passed an invalid filename (GH-25529)

(cherry picked from commit 4696f1285d83dd7b69f459c63e14080b1f87f797)

Co-authored-by: Steve Dower <steve.dower@python.org>

bpo-38822: Fixed os.stat failing on inaccessible directories. (GH-25527)

It would just fail if the path was inaccessible and had a trailing slash. It should fall back to the parent directory's metadata.
(cherry picked from commit fe63a401a9b3ca1751b81b5d6ddb2beb7f3675c1)

Co-authored-by: Steve Dower <steve.dower@python.org>

bpo-43284: Update platform.win32_ver to use _syscmd_ver instead of sys.getwindowsversion() (GH-25500)

The sys module uses the kernel32.dll version number, which can vary from the "actual" Windows version.
Since the best option for getting the version is WMI (which is expensive), we switch back to launching cmd.exe (which is also expensive, but a lot less code on our part).
sys.getwindowsversion() is not updated to avoid launching executables from that module.
(cherry picked from commit 2a3f4899c63806439e5bcea0c30f7e6a6295a763)

Co-authored-by: Shreyan Avigyan <shreyan.avigyan@gmail.com>

bpo-26227: Fixes decoding of host names on Windows from ANSI instead of UTF-8 (GH-25510)

(cherry picked from commit dc516ef8395d15da0ab225eb0dceb2e0581f51ca)

Co-authored-by: Steve Dower <steve.dower@python.org>

bpo-43472: Ensure PyInterpreterState_New audit events are raised when called through _xxsubinterpreters module (GH-25506)

(cherry picked from commit 7b86e47617d81a4b14d929743425f448971e8c86)

Co-authored-by: Steve Dower <steve.dower@python.org>

Fix typo in a dataclasses comment. (GH-25454)

(cherry picked from commit 76beadb8ff86eb2bb248bf918bfb20c4069932f4)

Co-authored-by: Eric V. Smith <ericvsmith@users.noreply.github.com>

[3.8] bpo-43522: Fix SSLContext.hostname_checks_common_name (GH-24899) (GH-25452)

Fix problem with ssl.SSLContext.hostname_checks_common_name. OpenSSL does not
copy hostflags from *struct SSL_CTX* to *struct SSL*.
(cherry picked from commit 330b49e397168df789fd0dd20cfe7e81b8e47258)

bpo-42967: coerce bytes separator to string in urllib.parse_qs(l) (GH-24818) (#25345)

* coerce bytes separator to string

* Add news

* Update Misc/NEWS.d/next/Library/2021-03-11-00-31-41.bpo-42967.2PeQRw.rst
(cherry picked from commit b38601d49675d90e1ee6faa47f7adaeca992d02d)

Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>

bpo-43842: Fix race condition in test_logging SMTP test (GH-25436) (GH-25437) (GH-25440)

Fix a race condition in the SMTP test of test_logging. Don't close a
file descriptor (socket) from a different thread while
asyncore.loop() is polling the file descriptor.

(cherry picked from commit 75ec103b3adbb7c619a0e22fa60f3d34c5a9e603)
(cherry picked from commit e1903e11a3d42512effe336026e0c67f602e5848)

[3.9] bpo-43723: Revert IDLE doc change (GH-25174)

Change threading.activeCount to synonym threading.active_count.
(cherry picked from commit 56c76df6e861322bdff77bfb21e5cd55fbacfad2)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

[3.8] bpo-43723: Backport IDLE doc change (GH-25174)

Cherry-picked from 9825bdfbd5c966abf1f1b7264992d722a94c9613

bpo-37741: make importlib.metadata docs discoverable through a module directive. (GH-25415)

Automerge-Triggered-By: GH:jaraco
(cherry picked from commit 23acadcc1c75eb74b2459304af70d97a35001b34)

Co-authored-by: Jason R. Coombs <jaraco@jaraco.com>

bpo-43777: Drop description of "pip search" command from tutorial (GH-25287)

(cherry picked from commit 133705b85cc25d1e6684d32f8943ca288fadfda0)

Co-authored-by: Bob Kline <bkline@users.noreply.github.com>

[3.8] bpo-43811: Test multiple OpenSSL versions on GHA (GH-25360) (GH-25392)

The new checks are only executed when one or more OpenSSL-related files are modified. The checks run a handful of networking and hashing test suites. All SSL checks are optional. This PR also introduces ccache to speed up compilation. In common cases it speeds up configure and compile time from about 90 seconds to less than 30 seconds.

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 8fa1489365e7af8b90286c97db55a2dc60a05cde)

Co-authored-by: Christian Heimes <christian@python.org>
Automerge-Triggered-By: GH:tiran

bpo-43816: Add extern "C" to Include/cpython/pyctype.h (GH-25365)

Signed-off-by: Andrew V. Jones <andrew.jones@vector.com>
(cherry picked from commit 54db51c9114ac49030832f5134979ca866ffd21c)

Co-authored-by: Andrew V. Jones <andrewvaughanj@gmail.com>

[3.8] bpo-43799: OpenSSL 3.0.0: declare OPENSSL_API_COMPAT 1.1.1 (GH-25329) (GH-25383)

Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit a4833883c9b81b6b272cc7c5b67fa1658b65304c)

[3.8] bpo-42248: [Enum] ensure exceptions raised in ``_missing_`` are released (GH-25350). (GH-25369)

(cherry picked from commit 8c14f5a787b21d5a1eae5d5ee981431d1c0e055f)

Co-authored-by: Ethan Furman <ethan@stoneleaf.us>

bpo-41561: Fix testing with OpenSSL 1.0.2 (GH-25355)

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 3447750073aff229b049e4ccd6217db2811dcfd1)

Co-authored-by: Christian Heimes <christian@python.org>

Fix description of behaviour of an exception class in 'from' clause (GH-24303) (GH-25342)

(cherry picked from commit 79650d0118b0a8861428b9dd063089de405cf137)

Co-authored-by: Mark Dickinson <mdickinson@enthought.com>
Co-authored-by: Mark Dickinson <mdickinson@enthought.com>

bpo-43739: Add type declaration Doc/extending/extending.rst example (GH-25332)

Add ignore file for the abidump check (GH-25322)

bpo-43105: Importlib now resolves relative paths when creating module spec objects from file locations (GH-25121)

bpo-38820: OpenSSL 3.0.0: Use supported hashing algos in doc test (GH-25319)

ripemd160 is not available in OpenSSL 3.0.0's default crypto provider.
It's only present in legacy provider.

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 2d7fdc90731e132f9d6b43852ee112f25831394b)

Co-authored-by: Christian Heimes <christian@python.org>

[3.8] bpo-43788: Generate version specific _ssl_data.h (GH-25300) (GH-25311)

(cherry picked from commit 150af7543214e1541fa582374502ac1cd70e8eb4)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-43794: OpenSSL 3.0.0: set OP_IGNORE_UNEXPECTED_EOF by default (GH-25309)

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 6f37ebc61e9e0d13bcb1a2ddb7fc9723c04b6372)

Co-authored-by: Christian Heimes <christian@python.org>

[3.8] bpo-43789: OpenSSL 3.0.0 Don't call passwd callback again in error case (GH-25303) (GH-25306)

(cherry picked from commit d3b73f32ef7c693a6ae8c54eb0e62df3b5315caf)

Co-authored-by: Christian Heimes <christian@python.org>

[3.8] bpo-43791: Skip TLS 1.0/1.1 tests under OpenSSL 3.0.0 (GH-25304) (GH-25308)

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 5151d642004c59cce58d669be85d9a5e987f51d3)

Co-authored-by: Christian Heimes <christian@python.org>
Automerge-Triggered-By: GH:tiran

Add CI step to check changes in the exported ABI (GH-25232)

bpo-39674: Fix collections ABC deprecation notice (GH-25281)

The deprecation originally slated for 3.9 was deferred to 3.10
(bpo-39674, GH-18545) and the documentation on the 3.8 release was
updated accordingly (GH-18748). However the deprecation notice in
the code was left as is, and still indicates deprecation with 3.9.

[3.8] bpo-43087: Fix error in ctypes "Incomplete Types" doc (GH-24404)

The previous "Fundamental data types" section says a c_char_p must be bytes (or None).
(cherry picked from commit 14829b09eb652f457cf837836909169746a810f0)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>
Co-authored-by: Zackery Spytz <zspytz@gmail.com>

Fix broken test for MutableSet.pop() (GH-25209) (GH-25270)

[3.8] bpo-36540: Improve doc of function definition regarding positional-only arguments (GH-25235) (GH-25260)

(cherry picked from commit 58d72cab89cf9652acc0bf0007aa20b2bcc98499)

Co-authored-by: Saiyang Gou <gousaiyang@163.com>

bpo-42999: Expand and clarify pathlib.Path.link_to() documentation. (GH-24294)

Co-authored-by: Barney Gale <barney.gale@gmail.com>

Improve CDN purge script (GH-25251)

(cherry picked from commit e35dd556e1adb4fc8b83e5b75ac59e428a8b5460)

Co-authored-by: Steve Dower <steve.dower@python.org>

bpo-43075: Fix ReDoS in urllib AbstractBasicAuthHandler (GH-24391)

Fix Regular Expression Denial of Service (ReDoS) vulnerability in
urllib.request.AbstractBasicAuthHandler. The ReDoS-vulnerable regex
has quadratic worst-case complexity and it allows cause a denial of
service when identifying crafted invalid RFCs. This ReDoS issue is on
the client side and needs remote attackers to control the HTTP server.
(cherry picked from commit 7215d1ae25525c92b026166f9d5cac85fb1defe1)

Co-authored-by: Yeting Li <liyt@ios.ac.cn>

bpo-43745: Actually updates Windows release to OpenSSL 1.1.1k. (GH-25213)

Earlier releases were mislabelled and included 1.1.1i again.
The tag/directory name is updated to ensure that builds get the fresh bits. However, the openssl-bin-1.1.1k tag in the repository has been forcibly updated, so fresh builds will be fine even without this change.
(cherry picked from commit 611aa39142f156508945ac312724474c493a6691)

Co-authored-by: Steve Dower <steve.dower@python.org>

[3.8] Fix blurb for bpo-43176. (GH-25215) (GH-25218)

(cherry picked from commit 1744c96ebc98b240f2564f75191097704b37244f)

Co-authored-by: Eric V. Smith <ericvsmith@users.noreply.github.com>
Automerge-Triggered-By: GH:ericvsmith

bpo-43176: Fix processing of empty dataclasses (GH-24484)

When a dataclass inherits from an empty base, all immutability checks are omitted. This PR fixes this and adds tests for it.

Automerge-Triggered-By: GH:ericvsmith
(cherry picked from commit 376ffc6ac491da74920aed1b8e35bc371cb766ac)

Co-authored-by: Iurii Kemaev <6885137+hbq1@users.noreply.github.com>

bpo-36470: Allow dataclasses.replace() to handle InitVars with default values (GH-20867) (GH-25201)

Co-Authored-By: Claudiu Popa <pcmanticore@gmail.com>
Automerge-Triggered-By: GH:ericvsmith
(cherry picked from commit 75220674c07abfc90c2cd7862d04cfa2e2354450)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>
Co-authored-by: Zackery Spytz <zspytz@gmail.com>

Fix typo in turtledemo.two_canvases. (GH-25194)

(cherry picked from commit 4e2ef7084185d2220003b4b5538e3d8190b2dcd6)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

bpo-43705: Document that SyntaxError's offsets are 1-indexed (GH-25153)

Changed the inline mentions of the attributes into a proper attribute list like `SystemExit` has.

Automerge-Triggered-By: GH:gvanrossum
(cherry picked from commit b2a91e0c9ee18b50cc86b21211c2258520a9f5d0)

Co-authored-by: Ammar Askar <ammar@ammaraskar.com>

Post 3.8.9

Merge tag 'v3.8.9' into 3.8

Python 3.8.9

[3.9] bpo-26053: Fix args echoed by pdb run command  (GH-25149)

* bpo-26053: Fix args echoed by pdb run command (GH-22033)

(cherry picked from commit 652bfdee9495dca241d48278742fe035b7a82bdb)

* bpo-26053: Fix test_pdb.test_issue26053() (GH-25139)

(cherry picked from commit bd4ab8e73906a4f12d5353f567228b7c7497baf7)
(cherry picked from commit 7ad56e254519047aeb9c669b9ea2f2bf0acfd401)

Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>

Python 3.8.9

bpo-43700: Replace Zulip badge with Discourse badge (GH-25141)

Automerge-Triggered-By: GH:zware
(cherry picked from commit bef7b26f7229f8b7cde843118a7bc7e2b00f0372)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>

Doc: io: Remove "In-memory streams" section (GH-24927)

(cherry picked from commit b045cdaf341f80b7d1e4804b932b6e415600c2e1)
Co-authored-by: Inada Naoki <songofacandy@gmail.com>

Fix grammar in enum documentation. (GH-24689)

There is an extra `s` in the singular word `method`.
Reported in docs mailing list by Steven Nguyen.

Automerge-Triggered-By: GH:Mariatta
(cherry picked from commit f193874056fb185305084b79b32d2745ce9be7cf)

Co-authored-by: Mariatta Wijaya <Mariatta@users.noreply.github.com>

bpo-37945: Fix test_locale.test_getsetlocale_issue1813() (GH-25110) (GH-25113)

Skip the test if setlocale() fails.
(cherry picked from commit f3ab670fea75ebe177e3412a5ebe39263cd428e3)

Co-authored-by: Victor Stinner <vstinner@python.org>

bpo-42225: IDLE - document two unix-related problems. (GH-25078)

1. Bad IP masquerade rules can prevent startup.
2. X cannot handle some complex colored chars.
(cherry picked from commit 1b4a9c7956d5dc64f8002f62bf0faae2d1892f90)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

bpo-43399: Fix ElementTree.extend not working on iterators (GH-24751)

(cherry picked from commit 51a85ddce8b336addcb61b96f04c9c5edef07296)

Co-authored-by: Alex Prengère <2138730+alexprengere@users.noreply.github.com>

[3.8] bpo-43631: Update to OpenSSL 1.1.1k (GH-25024) (GH-25089)

Signed-off-by: Christian Heimes <christian@python.org>
Automerge-Triggered-By: GH:tiran.
(cherry picked from commit a54fc683f237d8f0b6e999a63aa9b8c0a45b7fef)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-43637: Fix a possible memory leak in winreg.SetValueEx() (GH-25038)

(cherry picked from commit dfeec347f21b86879ba8f27f567bb275b243f1bc)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

bpo-33164: blake2: Fix Coverity scan (GH-25060)

(cherry picked from commit 068ebf9729d440cef03e4c57e3db83c851146172)

Co-authored-by: Inada Naoki <songofacandy@gmail.com>

bpo-43660: Fix crash when displaying exceptions with custom values for sys.stderr (GH-25075)

(cherry picked from commit 09b90a037d18f5d4acdf1b14082e57bda78e85d3)

Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

bpo-43562: fix test_ssl to skip on unreachable network (GH-24937) (GH-25047)

This test checks result code of the connection directly, so it never raises an exception that can be suppressed by `support.transient_internet`. Directly support skipping the test in case of unreachable network.
(cherry picked from commit 29c451c6989c3c94fa0a9facf187c24f3cbf2420)

Co-authored-by: Carl Meyer <carl@oddbird.net>
Co-authored-by: Carl Meyer <carl@oddbird.net>

bpo-35883: Py_DecodeLocale() escapes invalid Unicode characters (GH-24843) (GH-24906)

Python no longer fails at startup with a fatal error if a command
line argument contains an invalid Unicode character.

The Py_DecodeLocale() function now escapes byte sequences which would
be decoded as Unicode characters outside the [U+0000; U+10ffff]
range.

Use MAX_UNICODE constant in unicodeobject.c.
(cherry picked from commit 9976834f807ea63ca51bc4f89be457d734148682)

Co-authored-by: Victor Stinner <vstinner@python.org>
Co-authored-by: Victor Stinner <vstinner@python.org>

bpo-43659:  Fix test_curses on AIX (GH-25074)

curses.update_lines_cols() is only defined when the curses library
provides either resizeterm() or resize_term() functions which are optional
and are not provided on AIX.
(cherry picked from commit c8b5738810516df5722caf049003e9b319427bec)

Co-authored-by: Michael Felt <aixtools@users.noreply.github.com>

bpo-35930: Raising an exception raised in a "future" instance will create reference cycles (GH-24995) (#25071)

Before: https://lists.es.python.org/pipermail/general/attachments/20201229/0c14bc58/attachment-0002.png

After: https://lists.es.python.org/pipermail/general/attachments/20201229/0c14bc58/attachment-0003.png
(cherry picked from commit 32430aadadf6e012e39167d3c18a24e49fb84874)

Co-authored-by: Jesús Cea <jcea@jcea.es>
Co-authored-by: Jesús Cea <jcea@jcea.es>

bpo-42988: Remove the pydoc getfile feature (GH-25015)

CVE-2021-3426: Remove the "getfile" feature of the pydoc module which
could be abused to read arbitrary files on the disk (directory
traversal vulnerability). Moreover, even source code of Python
modules can contain sensitive data like passwords. Vulnerability
reported by David Schwörer.
(cherry picked from commit 9b999479c0022edfc9835a8a1f06e046f3881048)

Co-authored-by: Victor Stinner <vstinner@python.org>

[3.8] bpo-31907: [doc] clarify that str.format() does not support arbitrary expressions (GH-25053) (GH-25056)

(cherry picked from commit fb1d01b9630b5069fe975f16e07a027d90b89434)

Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>
Automerge-Triggered-By: GH:ericvsmith

[3.8] bpo-43617: Check autoconf-archive package in configure.ac (GH-25016) (GH-25035)

Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit 5d6e8c1c1a5f667cdce99cb3c563ac922198678d)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-39231: correct tutorial annotations section (GH-25029)

(cherry picked from commit a53e9a7cf5912a44c5143e353912e44cfcfca7dc)

Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>

bpo-39616: clarify SSLContext.check_hostname effect (GH-18484)

It doesn't actually affect whether match_hostname() is called (it
never is in this context any longer), but whether hostname
verification occurs in the first place.
(cherry picked from commit 9798cef92b882cd82a338d3368eaf3c4a32f5c2d)

Co-authored-by: Ville Skyttä <ville.skytta@iki.fi>

bpo-43620: Remove reference to os.sep from os.path.join() doc (GH-25025, GH-5030)

- removed ambiguous reference to os.sep from os.path.join() doc
(cherry picked from commit 21a2cabb3795f5170c746ab8f29e9d25c7442550)

Co-authored-by: Jared Sutton <jpsutton@gmail.com>

Clarify attribute docs on types.ModuleType (GH-24974)

(cherry picked from commit 76b5d714e4e2b9f3b63847325cba51d4c4dc36bc)

Co-authored-by: Brett Cannon <brett@python.org>

bpo-43577: Fix deadlock with SSLContext._msg_callback and sni_callback (GH-24957)

OpenSSL copies the internal message callback from SSL_CTX->msg_callback to
SSL->msg_callback. SSL_set_SSL_CTX() does not update SSL->msg_callback
to use the callback value of the new context.

PySSL_set_context() now resets the callback and _PySSL_msg_callback()
resets thread state in error path.

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 77cde5042a2f1eae489c11a67540afaf43cd5cdf)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)

Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level
2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow
TLS 1.0 and 1.1 on security level 2.

See:
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit f6c6b5821bff815bdc810de53992fd1fbdb2edd4)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-43353: Document that logging.getLevelName() accepts string representation of logging level. (GH-24693) (#24825)

(cherry picked from commit bbba28212ce0f58096a4043f32442c6e727b74fc)

Automerge-Triggered-By: GH:vsajip

bpo-43506: Doc: Update removal schedule for Py_UNICODE encoder APIs (GH-24885)

See PEP 624.
(cherry picked from commit 1330338583d183250186a8123b99d2283e945b4f)

[3.8] bpo-43285: Whats New entry for 3.8.9. (GH-24889)

Covers the ftplib security fix.

[3.8] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881)

bpo-43285: Make ftplib not trust the PASV response.

The IPv4 address value returned from the server in response to the PASV command
should not be trusted.  This prevents a malicious FTP server from using the
response to probe IPv4 address and port combinations on the client network.

Instead of using the returned address, we use the IP address we're
already connected to.  This is the strategy other ftp clients adopted,
and matches the only strategy available for the modern IPv6 EPSV command
where the server response must return a port number and nothing else.

For the rare user who _wants_ this ugly behavior, set a `trust_server_pasv_ipv4_address`
attribute on your `ftplib.FTP` instance to True..
(cherry picked from commit 0ab152c6b5d95caa2dc1a30fa96e10258b5f188e)

Co-authored-by: Gregory P. Smith <greg@krypto.org>