SECURITY UPDATE: heap-based buffer overflow in xcoff_link_add_symbols
(bfd/xcofflink.c) triggered by a crafted XCOFF object file
debian/patches/CVE-2026-6846.patch: size the reloc_info array by the
highest section target_index rather than by section_count, which the
XCOFF overflow-header handling decrements