cpio: fix CVE-2014-9112 by Fedora patch