Update to 3.8.12

Update to 3.8.11
Fix for CVE-2021-3733 and CVE-2021-3737

Adjusted the postun scriptlets to enable upgrading to RHEL 9
Resolves: rhbz#1933055

Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated

Security fix for CVE-2021-3426: information disclosure via pydoc

Update to 3.8.8 and fix CVE-2021-23336

Security fix for CVE-2021-3177

Add support for upstream architecture names

Update to 3.8.6
Security fix for CVE-2020-26116

Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)

Fix sqlite3 deterministic test

Rebased to 3.8.3 final
Backported changes from Fedora
Recommend python3-tkinter when tk is installed
Add bcond for no_semantic_interposition (enabled by default)
Update the ensurepip module to work with setuptools >= 45

Fix test_hashlib and test_hmac under FIPS mode

Fix ensurepip to run pip via runpy to fix compatibility with pip 19.3.1

Skip test_startup_imports from test_site if we have a .pth file in sys.path

Security fix for CVE-2020-8492