lang/python314: Security update to 3.14.4
Add a -flto=full option, which can speed up the port build
in terms of wallclock time at the expense of overall more
CPU time.
Issue a warning that test_ssl will fail from pre-test
if DEBUG is enabled.
Changelog: https://docs.python.org/release/3.14.4/whatsnew/changelog.html
PR: 294324
Which contains these security fixes:
pyexpat.c: Unbounded C recursion in conv_content_model causes crash
Security: https://github.com/python/cpython/issues/145986
/ CVE-2026-4224
Reject control characters in more places in http.cookies.Morsel
Security: https://github.com/python/cpython/issues/145599
/ CVE-2026-3644
SourcelessFileLoader does not use io.open_code()
Security: https://github.com/python/cpython/issues/145506
/ CVE-2026-2297
Disallow usage of control characters in status, headers and
values for security in Lib/wsgiref/handlers.py
Security: https://github.com/python/cpython/issues/144370
Reject leading dashes in webbrowser.open()
Security: https://github.com/python/cpython/issues/143930
/ 9fdad262-2e0f-11f1-88c7-00a098b42aeb / CVE-2026-4519
Excess Base64 data ignored after padding by default
Security: https://github.com/python/cpython/issues/145264
/ CVE-2026-3446
Additional security related PRs from upstream
HTTP proxy via "CONNECT" tunneling doesn't sanitize CR/LF
Obtained from: https://github.com/python/cpython/pull/148342
Security https://github.com/python/cpython/issues/146212
/ CVE-2026-1502
configparser.RawConfigParser.{OPTCRE,OPTCRE_NV} regexes vulnerable to
quadratic backtracking
Obtained from: https://github.com/python/cpython/pull/148287
Security: https://github.com/python/cpython/issues/146333
(cherry picked from commit 955268b87942c8ed7787c1cce516bf8bf8ff1041)