cpio: fix CVE-2014-9112 by Fedora patch

(cherry picked from commit 225ddcda9a4b6097f3c10ddac3b52aa7ca9a3f97)
libyaml: fix CVE-2014-9130 by upstream patch

(cherry picked from commit c8a53923fca610ea56c98d58c891fd8161f6ac01)
kde: fix CVE-2014-8600 by upstream patches

https://www.kde.org/info/security/advisory-20141113-1.txt
I couldn't find kio-extras, so I hope we don't have it disguised somewhere.

(cherry picked from commit 15b9626a3df5c453941c78729e5f825147a594b0)