CentOS Errata and Security Advisory 2005:378
https://rhn.redhat.com/errata/RHSA-2005-378.html
The following updated files have been uploaded and are currently syncing to the mirrors:
x86_64: cpio-2.5-8.RHEL4.x86_64.rpm
src: cpio-2.5-8.RHEL4.src.rpm