Security fix for CVE-2015-20107
Fix the test suite support for Expat >= 2.4.5

Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs

Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response

Security fixes for CVE-2021-3737 and CVE-2021-3733

Adjusted the postun scriptlets to enable upgrading to RHEL 9
Resolves: rhbz#1933055

Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests

Fix for CVE-2021-23336

Security fix for CVE-2021-3177

Fixes for bundling prefix=/app build in gimp/inkscape containers

Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest

Update to 2.7.18

Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)

Update to 2.7.17

Adding FIPS compliance to Python 2 in RHEL8:
Updated patch 146 with a new version of the FIPS patch
Patch 169 has been removed, obsoleted by the updated patch 146

Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
Require python2-setuptools from python2-devel to prevent packaging errors

Fix urlparse.urlsplit() error message for Unicode URL