(cherry picked from commit 683281f)

It was proposed to add an warning for http.server regarding security
issues. The wording was provided at bpo-26005 by @orsenthil
(cherry picked from commit 1d26c72)

Co-authored-by: Felipe Rodrigues <felipe@felipevr.com>

… methods (GH-9751) (GH-9798)

for the SHAKE algorithm in the hashlib module.
(cherry picked from commit 9b8c2e7)

(cherry picked from commit fc439d2)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

(cherry picked from commit 53ebf4b)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

…builds. (GH-8052)

(cherry picked from commit 65d2f8c)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

(cherry picked from commit da2bf9f)

Co-authored-by: Bruno Oliveira <nicoddemus@gmail.com>

(cherry picked from commit 4505f65)

Co-authored-by: Gus Goulart <augusto@goulart.me>

…GH-9831) (GH-9832)

With macOS framework builds, test case test_nonexisting_script in
test_nonexisting_script fails because the test case assumes that
the file name in sys.executable will appear in the error message.
For macOS framework builds, sys.executable is the file name of the
stub launcher and its file name bears no relationship to the file
name of the actual python executable.  For now, skip the test in
this case.
(cherry picked from commit f6c29a6)

Co-authored-by: Ned Deily <nad@python.org>

For 3.7.1rc1 and 3.6.7rc1 we used a pre-release development
snapshot of Tk 8.6 to pick up some post-8.6.8 fixes for macOS.
But the snapshot introduced at least one regression (bpo-34927).
For rc2, revert to using the standard release 8.6.8 for now.
This reverts commit d9cfe5e.

(cherry picked from commit d4d6013)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

Covered all special cases: bytes, tuple, list, differend
kinds of iterables and iterators.
(cherry picked from commit 1a997eb)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

…GH-9837) (GH-9849)

https://bugs.python.org/issue34970
(cherry picked from commit 97cf082)

Co-authored-by: Andrew Svetlov <andrew.svetlov@gmail.com>

A Windows build with _tkinter, tkinter, and idlelib
but without ctypes is unlikely but apparently possible.
(cherry picked from commit d274afb)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

Methods find(), findtext() and findall() of xml.etree.ElementTree.Element
were not able to find chldren which are instances of Element subclasses.
(cherry picked from commit b11c566)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

(cherry picked from commit c8bb467)

Co-authored-by: Andrés Delfino <adelfino@gmail.com>

…). (GH-9852)

bytes and bytearray constructors converted unexpected exceptions
(e.g. MemoryError and KeyboardInterrupt) to TypeError.
(cherry picked from commit e890421)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

…H-1432)

* fix dangling mention of key=str.lower in heapq doc

* Fix dangling mention of keyfunc example for sorted()
(cherry picked from commit 6bdb6f7)

Co-authored-by: Wolfgang Maier <wolfgang.maier@biologie.uni-freiburg.de>

…9692) (GH-9830)

Replace "Availability: xxx" with ".. availability:: xxx" in the doc.
 Original patch by Georg Brandl.

 Co-Authored-By: Georg Brandl <georg@python.org>
 (cherry picked from commit 2d6097d)

 Co-authored-by: Cheryl Sabella <cheryl.sabella@gmail.com>

* Add News entry for the change in multiprocessing.reduction.recvfds
made in GH-9613.
(cherry picked from commit bd036d3)

Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

python-gdb.py now handles errors on computing the line number
of a Python frame.

Changes:

* PyFrameObjectPtr.current_line_num() now catchs any Exception on
  calling addr2line(), instead of failing with a surprising "<class
  'TypeError'> 'FakeRepr' object is not subscriptable" error.
* All callers of current_line_num() now handle current_line_num()
  returning None.
* PyFrameObjectPtr.current_line() now also catchs IndexError on
  getting a line from the Python source file.
(cherry picked from commit 2e438cc)

Co-authored-by: Victor Stinner <vstinner@redhat.com>

…tProtocol to EchoServerProtocol (GH-9859)

(cherry picked from commit 43a5bd7)

Co-authored-by: Braden Groom <braden.groom@gmail.com>

Fix test_cmd_line_script.test_nonexisting_script(): the test must not
rely on sys.executable, since main.c uses config->program which can
be different than sys.executable in many cases (for example, on macOS
when using the framework).
(cherry picked from commit ea75187)

Co-authored-by: Victor Stinner <vstinner@redhat.com>

…_type (GH-9827)

(cherry picked from commit e385d06)

Co-authored-by: Stéphane Wirtel <stephane@wirtel.be>

…ofile (GH-9925) (GH-9926)

[3.7] [bpo-23420](https://bugs.python.org/issue23420): Verify the value of '-s' when execute the CLI of cProfile (GH-9925)

Verify the value for the parameter '-s' of the cProfile CLI. Patch by Robert
Kuska.

Co-authored-by: Robert Kuska <rkuska@gmail.com>
(cherry picked from commit fcd5e84)





https://bugs.python.org/issue23420

…-9940)

Restores the use of pyexpatns.h to isolate our embedded copy of the expat C
library so that its symbols do not conflict at link or dynamic loading time
with an embedding application or other extension modules with their own
version of libexpat.

5dc3f23b5fb0b510926012cb3732dae63cddea60GH-diff-3afaf7274c90ce1b7405f75ad825f545 inadvertently removed it when upgrading expat.
(cherry picked from commit 9d4712b)


Co-authored-by: Gregory P. Smith <greg@krypto.org>


https://bugs.python.org/issue35011