Python 3.6.11

Python 3.6.11 is the latest security fix release of Python 3.6.

• bpo-39073: Disallow CR or LF in email.headerregistry.Address arguments to guard against header injection attacks.
• bpo-38576: Disallow control characters in hostnames in http.client, addressing CVE-2019-18348. Such potentially malicious header injection URLs now cause a InvalidURL to be raised.
• bpo-39503: CVE-2020-8492: The AbstractBasicAuthHandler class of the urllib.request module uses an inefficient regular expression which can be exploited by an attacker to cause a denial of service. Fix the regex to prevent the catastrophic backtracking. Vulnerability reported by Ben Caller and Matt Schwager.

Also fix a regression with distutils.sysconfig.get_config_var('LIBPL') value in Fedora specific patches.