CLSA-2026-1789576008 libxml2: Fix of CVE-2026-86138

CVE-2026-86138: add integer-overflow guards to the pool size calculations in xmlDictAddString and xmlDictAddQString, and cap the name and prefix lengths in xmlDictQLookup at INTMAX/2, preventing an undersized allocation and heap buffer overflow...