Fix for CVE-2021-23336

Fix for CVE-2021-3177

New options -a and -k for pathfix.py script backported from upstream

Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests

Add support for upstream architecture names

Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client

Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)

Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which

Fix python3-config --configdir (rhbz#1772992).

Security fix for CVE-2020-8492

Add a sentinel value on the Hmac_members table of the fips compliant hmac module

Skip test_startup_imports from test_site if we have a .pth file in sys.path

Security fix for CVE-2019-16935

Build Python with -fno-semantic-interposition for better performance
https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup
Also fix test_gdb failures with Link Time Optimizations

Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode
Use OpenSSL's DRBG and disable os.getrandom() function in FIPS mode

Changed Requires into Recommends for python3-pip to allow a lower RHEL8