Update to 3.8.8 and fix CVE-2021-23336

Security fix for CVE-2021-3177

Add support for upstream architecture names

Update to 3.8.6
Security fix for CVE-2020-26116

Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)

Fix sqlite3 deterministic test

Rebased to 3.8.3 final
Backported changes from Fedora
Recommend python3-tkinter when tk is installed
Add bcond for no_semantic_interposition (enabled by default)
Update the ensurepip module to work with setuptools >= 45

Fix test_hashlib and test_hmac under FIPS mode

Fix ensurepip to run pip via runpy to fix compatibility with pip 19.3.1

Skip test_startup_imports from test_site if we have a .pth file in sys.path

Security fix for CVE-2020-8492

Implement alternatives for /usr/bin/python, python3 and related executables
Resolves: rhbz#1807041

Add support for FIPS mode
Resolves: rhbz#1793589

Exclude unsupported i686 arch

Build Python with -fno-semantic-interposition for better performance

Converting to RHEL8
Changes from Fedora
Removed gpgverifycation as the tool used in Fedora is not present in RHEL8
Added versioned pathfix.py and 2to3 scripts into bindir
Depend on python3-rpm-generators always, because they run on Python 3.6
Added python38-rpm-macros subpackage
Fixed py3_install_wheel macro because python38-pip does not have
-strip-prefix patch