cpio version 2.13 suffers from a privilege escalation vulnerability via setuid files in a cpio archive.