tree f94b1ddbab0238426f4ba81a68774e36f1fd8da8
parent 3bd1759f804a53d15685e22eab7d609bb1fa556b
author Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp> 1579892541 +0900
committer Sebastiaan van Stijn <github@gone.nl> 1580838062 +0100
gpgsig -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIcBAABAgAGBQJeOayuAAoJEHZpjznVJ86MOWwP/Al+lX9qXy2flpuDddX7DCY0
 IZs2T1pF+bM4yZQKCou9D5O5zlGktGMBUAyTkNuqHpA0Ga59/UcSWVWSTtOFxgPH
 XUuvejPZ75Ngn86HKf1fRJFiPzuL3a2JeLBzPJCtD4DeF/q6jgnp15eJdeP5Woa4
 MZmHO7vw0sL8GspUuZEwu8mGX7lJd16bNPCPnkfZmSGwo0z8NXwi/chLyaaSYJwB
 jCY4Fe8++hxXTkNuNU60DD3XJC0tiZGNA232gTCBQlvEdtVev/RLWMlSdcRM2BdX
 W7+0sGGtNUaLMAkeS7/+6hwfj9JHi7hiYXF7HiaWN3B47rTCVSZveBHl644dmT0N
 6d5pgm/0RpH78QCTFJGtlxuQG/sxZR2cSTNvUmP9iLVixVo7xd76x0ZWAT+Gz6X6
 Tui3tQgAvOihWjkprMYxC5ASrPxO28KojC0kyx44R/h/P43UXRJC0d3Pbfldyogw
 dz980ilSoaaRvvWl5jFDBeys7mdXAOG+ALlOQ722PQSRIxH3/epJyZae90NU4jnH
 QMZv4B2kkF7Q/j81/S1JZJGyEi0E/4C99p02PIfYIHdtV7MZql4gIPXbKZ3iUeSl
 emzWxdvSRh8+qUC07bguUDbQvOYVHRz628eJp5PiTFwpcQ3O7dCJYHZJqss8g0WM
 Uq/D6N2nvI0nPC2YXG8c
 =isxy
 -----END PGP SIGNATURE-----

update runc library to v1.0.0-rc10 (CVE-2019-19921)

Notable changes:
* Fix CVE-2019-19921 (Volume mount race condition with shared mounts): https://github.com/opencontainers/runc/pull/2207
* Fix exec FIFO race: https://github.com/opencontainers/runc/pull/2185
* Basic support for cgroup v2.  Almost feature-complete, but still missing support for systemd mode in rootless.
  See also https://github.com/opencontainers/runc/issues/2209 for the known issues.

Full changes: https://github.com/opencontainers/runc/compare/v1.0.0-rc9...v1.0.0-rc10

Also updates go-selinux: https://github.com/opencontainers/selinux/compare/3a1f366feb7aecbf7a0e71ac4cea88b31597de9e...5215b1806f52b1fcc2070a8826c542c9d33cd3cf
(See https://github.com/containerd/cri/pull/1383#issuecomment-578227009)

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
(cherry picked from commit 6d6808090736ac76e908e78aa6894f5586c7d243)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>