glibc timezone/zic.c relname(): integer overflow in allocation sizes can lead to heap OOB writes

binutils/prdbg.c: unchecked strlen/strcpy/strcat growth in debug type formatting (potential CWE-787)

tar src/extract.c: delayed_link uses strcpy into tail buffer

wget vms_getpwuid-like function uses unchecked strcpy into fixed buffers (potential overflow)

libiberty: integer overflow in vasprintf size calculation can lead to heap buffer overflow