@@ -4,7 +4,7 @@

 # containerd is also pinned in vendor.conf. When updating the binary

 # version you may also need to update the vendor version to pick up bug

 # fixes or new APIs.

-CONTAINERD_COMMIT=bb71b10fd8f58240ca47fbb579b9d1028eea7c84 # v1.2.5

+CONTAINERD_COMMIT=894b81a4b802e4eb2a91d1ce216b8817763c29fb # v1.2.6

 install_containerd() {

 	echo "Install containerd version $CONTAINERD_COMMIT"

@@ -4,7 +4,7 @@

 # The version of runc should match the version that is used by the containerd

 # version that is used. If you need to update runc, open a pull request in

 # the containerd project first, and update both after that is merged.

-RUNC_COMMIT=2b18fe1d885ee5083ef9f0838fee39b62d653e30

+RUNC_COMMIT=029124da7af7360afa781a0234d1b083550f797c # v1.0.0-rc7-6-g029124da

 install_runc() {

 	# If using RHEL7 kernels (3.10.0 el7), disable kmem accounting/limiting

@@ -81,7 +81,7 @@ google.golang.org/grpc 7a6a684ca69eb4cae85ad0a484f2e531598c047b # v1.12.2

 # the containerd project first, and update both after that is merged.

 # This commit does not need to match RUNC_COMMIT as it is used for helper

 # packages but should be newer or equal.

-github.com/opencontainers/runc 2b18fe1d885ee5083ef9f0838fee39b62d653e30

+github.com/opencontainers/runc 029124da7af7360afa781a0234d1b083550f797c # v1.0.0-rc7-6-g029124da

 github.com/opencontainers/runtime-spec 29686dbc5559d93fb1ef402eeda3e35c38d75af4 # v1.0.1-59-g29686db

 github.com/opencontainers/image-spec v1.0.1

 github.com/seccomp/libseccomp-golang 32f571b70023028bd57d9288c20efbcb237f3ce0

@@ -249,7 +249,7 @@ static int make_execfd(int *fdtype)

 {

 	int fd = -1;

 	char template[PATH_MAX] = {0};

-	char *prefix = secure_getenv("_LIBCONTAINER_STATEDIR");

+	char *prefix = getenv("_LIBCONTAINER_STATEDIR");

 	if (!prefix || *prefix != '/')

 		prefix = "/tmp";

@@ -351,7 +351,7 @@ static int try_bindfd(void)

 {

 	int fd, ret = -1;

 	char template[PATH_MAX] = {0};

-	char *prefix = secure_getenv("_LIBCONTAINER_STATEDIR");

+	char *prefix = getenv("_LIBCONTAINER_STATEDIR");

 	if (!prefix || *prefix != '/')

 		prefix = "/tmp";

@@ -5,7 +5,7 @@ github.com/opencontainers/runtime-spec 29686dbc5559d93fb1ef402eeda3e35c38d75af4

 # Core libcontainer functionality.

 github.com/checkpoint-restore/go-criu v3.11

 github.com/mrunalp/fileutils ed869b029674c0e9ce4c0dfa781405c2d9946d08

-github.com/opencontainers/selinux v1.0.0-rc1

+github.com/opencontainers/selinux v1.2.1

 github.com/seccomp/libseccomp-golang 84e90a91acea0f4e51e62bc1a75de18b1fc0790f

 github.com/sirupsen/logrus a3f95b5c423586578a4e099b11a46c2479628cac

 github.com/syndtr/gocapability db04d3cc01c8b54962a58ec7e491717d06cfcc16