Patch by Serhiy Storchaka.

Patch by Ashish Nitin Patil.

Issue #16626: Fix infinite recursion in glob.glob() on Windows when the pattern contains a wildcard in the drive or UNC path.
Patch by Serhiy Storchaka.

Patch by Sebastian Kreft.

Issue #16298: In HTTPResponse.read(), close the socket when there is no Content-Length and the incoming stream is finished.
Patch by Eran Rundstein.

Found by Clang trunk's Undefined-Behavior Sanitizer.  [more to come]

Issue #16248: Disable code execution from the user's home directory by tkinter when the -E flag is passed to Python.
Patch by Zachary Ware.

Original patch by Julien Courteau and Pierre Paul Lefebvre.

Issue #16602: When a weakref's target was part of a long deallocation chain, the object could remain reachable through its weakref even though its refcount had dropped to zero.

Thanks to Eugene Toder for diagnosing and reporting the issue.

Patch by Steven Kryskalla.

Thanks to Sean Munkel from docs@

This is necessary for ZFS systems, which don't support UF_IMMUTABLE.
--
Kubilay Kocak (koobs) asked me on IRC to backport this fix to Python 2.7: done!

Patch by Serhiy Storchaka.

Patch by Bruno Dupuis.