with it a vareity of bug fixes, both security and behavior.  See
http://www.libexpat.org/ for the list.

NOTE: I already backported the expat hash randomization fix in March.

Fixes issue #14340.

stream or a decoder produces data of an unexpected type (i.e. when
io.TextIOWrapper initialized with text stream or use bytes-to-bytes codec).

deployment target prior to 10.6.

Issue #15633: httplib.HTTPResponse is now mark closed when the server sends less than the advertised Content-Length.

Remove trailing dots on Windows.

supported.

Retina displays.  Applies to Tkinter apps, such as IDLE, on OS X
framework builds linked with Cocoa Tk 8.5+.
Suggested by Kevin Walzer

constructors once, to avoid memory leaks when finalizing and re-initializing
the Python interpreter.

Additional fix for Issue #12268: The io module file object writelines() methods no longer abort early when one of its write system calls is interrupted (EINTR).

its destination path when extracting malicious zip files.

--without-doc-strings.

incomplete "End of Central Directory" record.  Original patch by Guilherme
Polo and Alan McIntyre.

    In particular, fix extension module build failures when trying to use
    32-bit-only installer Pythons on systems with Xcode 4 (currently
    OS X 10.8, 10.7, and optionally 10.6).
    * Backport 3.3.0 fixes to 3.2 branch (for release in 3.2.4)
    * Since Xcode 4 removes ppc support, extension module builds now
      check for ppc compiler support and by default remove ppc and
      ppc64 archs when they are not available.
    * Extension module builds now revert to using system installed
      headers and libs (/usr and /System/Library) if the SDK used
      to build the interpreter is not installed or has moved.
    * Try to avoid building extension modules with deprecated
      and problematic Apple llvm-gcc compiler.  If original compiler
      is not available, use clang instead by default.

Python file.  Patch by Ben Morgan.

--without-doc-strings.

Also fix sporadic failures in test_builtin due to dependence on whether the
readline module has previously been imported.

are now initialized dynamically as needed.

Now it requires almost 4x less memory and is almost 2x faster.