Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV attack countermeasure.
Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in SimpleXMLRPCServer
upon malformed POST request.
Back port Python 2.7 fix for test_invalid_redirect() in test_urllib.py.
- Issue #13703: oCERT-2011-003: add -R command-line option and PYTHONHASHSEED
  environment variable, to provide an opt-in way to protect against denial of
  service attacks due to hash collisions within the dict and set types.  Patch
  by David Malcolm, based on work by Victor Stinner.
Whitespace normalization
Let's sort the keys so that this test passes even with random hashes.
ensure no one tries to hash things before the random seed is found
Backport fix from default branch for ./python -R -Wd where hash('d') would not
have gotten randomized.
merge heads
Fix crash at startup with -W options.
don't need this hack anymore
Remove reST markup from --help output.  Also: O(n**2) is dict construction, not single insertion.
Backport from 2.7 branch.

    changeset:   75165:780008020c40
    user:        Antoine Pitrou <solipsis@pitrou.net>
    date:        Wed Feb 22 03:33:56 2012 +0100
    summary:     Fix (presumably) test_hash under big-endian systems (PPC).
Backport from 2.7:

    changeset:   75153:9b7c6dd19e25
    branch:      2.7
    parent:      75151:b1a02c17b327
    user:        Antoine Pitrou <solipsis@pitrou.net>
    date:        Tue Feb 21 22:02:04 2012 +0100
    files:       Lib/test/test_os.py
Back port from 2.7:

    http://hg.python.org/cpython/rev/48705250232c
    changeset:   75187:48705250232c
    branch:      2.7
    parent:      75184:9a1d902714ae
    user:        Antoine Pitrou <solipsis@pitrou.net>
    date:        Wed Feb 22 22:16:25 2012 +0100
Bump to version 2.6.8rc1.
Bump some more copyright years (as per PEP 101), since this is the first
release of 2.6 for 2012.
Added tag v2.6.8rc1 for changeset caab08cd2b3e
Added tag v2.6.8rc1 for changeset 5356b6c7fd66
- Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash
  table internal to the pyexpat module's copy of the expat library to avoid a
  denial of service due to hash collisions.  Patch by David Malcolm with some
  modifications by the expat project.