fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
Resolves: #1806940

fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
Resolves: #1817743

use the full PR 5348 to fix "no route to host from inside container"
Resolves: #1806895

update fix for "podman (1.6.4) rhel 8.1 no route to host from inside container"
Resolves: #1806895

fix "CVE-2020-1702 podman: containers/image: Container images read entire image manifest into memory"
Resolves: #1810614

fix "[FJ8.2 Bug]: [REG]The "--group-add" option of "podman create" doesn't function."
Resolves: #1808702

fix "Podman can't reuse a container name, even if the container that was using it is no longer around"
Resolves: #1807437

fix "podman exec does not reads from stdin"
Resolves: #1807586

fix "podman (1.6.4) rhel 8.1 no route to host from inside container"
Resolves: #1806895

fix "Podman support for FIPS Mode requires a bind mount inside the container"
Resolves: #1804189

Fix CVE-2020-1726
Resolves: #1801825

allow colon be present in tarball name (#1797599)

resurrect s390x arch as kernel there now has the renameat2 syscall (#1773504)

Fix thread safety of gpgme (#1792243)

temporary disable s390x arch due to #1773504 causing fuse-overlayfs
podman requires it

drop libvarlink and hard libseccomp deps: we don't have these in RHEL7.8