Merge #14398: Fix size truncation and overflow bugs in bz2 module.

diff --cc Misc/NEWS
index fae3f135dc2eb76fb26b8b697d7ec7c5a936f3c2,fe62aabb6dd9d04095ec7b03cc3691034407dafe..cffead00854e36239a974a1c0678bf7bfd298603
--- 1/Misc/NEWS
--- 2/Misc/NEWS
+++ b/Misc/NEWS
@@@ -59,14 -46,8 +59,16 @@@ Core and Builtin
  Library
  -------
  
+ - Issue #14398: Fix size truncation and overflow bugs in the bz2 module.
+ 
 +- Issue #12692: Fix resource leak in urllib.request when talking to an HTTP
 +  server that does not include a "Connection: close" header in its responses.
 +
 +- Issue #12034: Fix bogus caching of result in check_GetFinalPathNameByHandle.
 +  Patch by Atsuo Ishimoto.
 +
 +- Improve performance of `lzma.LZMAFile`.
 +
  - Issue #16220: wsgiref now always calls close() on an iterable response.
    Patch by Brent Tubbs.