diff --git a/.gitignore b/.gitignore
index dc6af45..32283ba 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/runc-d736ef1.tar.gz
+SOURCES/runc-dc9208a.tar.gz
diff --git a/.runc.metadata b/.runc.metadata
index 6c81a25..39b6b73 100644
--- a/.runc.metadata
+++ b/.runc.metadata
@@ -1 +1 @@
-812dbd873389db38f03438166784aee998146d30 SOURCES/runc-d736ef1.tar.gz
+32859590dea35b77eed012c388d97fc12fdfdb93 SOURCES/runc-dc9208a.tar.gz
diff --git a/SPECS/runc.spec b/SPECS/runc.spec
index bcfab81..2acb5b8 100644
--- a/SPECS/runc.spec
+++ b/SPECS/runc.spec
@@ -21,12 +21,12 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback no_openssl ${BUIL
 # https://github.com/opencontainers/runc
 %global import_path %{provider}.%{provider_tld}/%{project}/%{repo}
 %global git0 https://%{import_path}
-%global commit0 d736ef14f0288d6993a1845745d6756cfc9ddd5a
+%global commit0 dc9208a3303feef5b3839f4323d9beb36df0a9dd
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 Name: %{repo}
 Version: 1.0.0
-Release: 64.rc9%{?dist}
+Release: 66.rc10%{?dist}
 Summary: CLI for running Open Containers
 ExcludeArch: %{ix86}
 License: ASL 2.0
@@ -38,7 +38,6 @@ BuildRequires: git
 BuildRequires: go-md2man
 BuildRequires: libseccomp-devel
 Requires: criu
-Requires(pre): container-selinux >= 2:2.2-2
 
 %description
 The runc command can be used to start containers which are packaged
@@ -89,6 +88,14 @@ install -p -m 0644 contrib/completions/bash/%{name} %{buildroot}%{_datadir}/bash
 %{_datadir}/bash-completion/completions/%{name}
 
 %changelog
+* Tue May 12 2020 Jindrich Novy <jnovy@redhat.com> - 1.0.0-66.rc10
+- synchronize containter-tools 8.3.0 with 8.2.1
+- Related: #1821193
+
+* Wed Feb 12 2020 Jindrich Novy <jnovy@redhat.com> - 1.0.0-65.rc10
+- address CVE-2019-19921 by updating to rc10
+- Resolves: #1801887
+
 * Wed Dec 11 2019 Jindrich Novy <jnovy@redhat.com> - 1.0.0-64.rc9
 - use no_openssl in BUILDTAGS (no vendored crypto in runc)
 - Related: RHELPLAN-25139