diff --git a/_service b/_service
index ded15ce..41a92a2 100644
--- a/_service
+++ b/_service
@@ -4,24 +4,24 @@
https://github.com/containers/storage.git
git
storage
-1.12.1
-v1.12.1
+1.12.10
+v1.12.10
https://github.com/containers/image.git
git
image
-1.5
-v1.5
+1.5.1
+v1.5.1
https://github.com/containers/libpod.git
git
libpod
-1.2.0
-v1.2.0
+1.4.0
+v1.4.0
diff --git a/image-1.5.1.tar.xz b/image-1.5.1.tar.xz
new file mode 100644
index 0000000..87107a0
--- /dev/null
+++ b/image-1.5.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0fc964d0ff6c75534b6d1dd4603430dacb5a12d845b33f23f5db26329da83bf2
+size 251328
diff --git a/image-1.5.tar.xz b/image-1.5.tar.xz
deleted file mode 100644
index 8541fc4..0000000
--- a/image-1.5.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0572087eb768e9748b684998ec555273f5054d07857e103b88022188c53fdfc4
-size 250692
diff --git a/libcontainers-common.changes b/libcontainers-common.changes
index 52e272f..13a9854 100644
--- a/libcontainers-common.changes
+++ b/libcontainers-common.changes
@@ -1,3 +1,109 @@
+-------------------------------------------------------------------
+Tue Jun 11 07:06:13 UTC 2019 - Sascha Grunert
+
+- Update to libpod v1.4.0
+ - The podman checkpoint and podman restore commands can now be
+ used to migrate containers between Podman installations on
+ different systems
+ - The podman cp command now supports a pause flag to pause
+ containers while copying into them
+ - The remote client now supports a configuration file for
+ pre-configuring connections to remote Podman installations
+ - Fixed CVE-2019-10152 - The podman cp command improperly
+ dereferenced symlinks in host context
+ - Fixed a bug where podman commit could improperly set
+ environment variables that contained = characters
+ - Fixed a bug where rootless Podman would sometimes fail to start
+ containers with forwarded ports
+ - Fixed a bug where podman version on the remote client could
+ segfault
+ - Fixed a bug where podman container runlabel would use
+ /proc/self/exe instead of the path of the Podman command when
+ printing the command being executed
+ - Fixed a bug where filtering images by label did not work
+ - Fixed a bug where specifying a bing mount or tmpfs mount over
+ an image volume would cause a container to be unable to start
+ - Fixed a bug where podman generate kube did not work with
+ containers with named volumes
+ - Fixed a bug where rootless Podman would receive permission
+ denied errors accessing conmon.pid
+ - Fixed a bug where podman cp with a folder specified as target
+ would replace the folder, as opposed to copying into it
+ - Fixed a bug where rootless Podman commands could double-unlock
+ a lock, causing a crash
+ - Fixed a bug where Podman incorrectly set tmpcopyup on /dev/
+ mounts, causing errors when using the Kata containers runtime
+ - Fixed a bug where podman exec would fail on older kernels
+ - The podman commit command is now usable with the Podman remote
+ client
+ - The --signature-policy flag (used with several image-related
+ commands) has been deprecated
+ - The podman unshare command now defines two environment
+ variables in the spawned shell: CONTAINERS_RUNROOT and
+ CONTAINERS_GRAPHROOT, pointing to temporary and permanent
+ storage for rootless containers
+ - Updated vendored containers/storage and containers/image
+ libraries with numerous bugfixes
+ - Updated vendored Buildah to v1.8.3
+ - Podman now requires Conmon v0.2.0
+ - The podman cp command is now aliased as podman container cp
+ - Rootless Podman will now default init_path using root Podman's
+ configuration files (/etc/containers/libpod.conf and
+ /usr/share/containers/libpod.conf) if not overridden in the
+ rootless configuration
+- Update to image v1.5.1
+ - Vendor in latest containers/storage
+ - docker/docker_client: Drop redundant Domain(ref.ref) call
+ - pkg/blobinfocache: Split implementations into subpackages
+ - copy: progress bar: show messages on completion
+ - docs: rename manpages to *.5.command
+ - add container-certs.d.md manpage
+ - pkg/docker/config: Bring auth tests from
+ docker/docker_client_test
+ - Don't allocate a sync.Mutex separately
+- Update to storage v1.12.10
+ - Add function to parse out mount options from graphdriver
+ - Merge the disparate parts of all of the Unix-like lockfiles
+ - Fix unix-but-not-Linux compilation
+ - Return XDG_RUNTIME_DIR as RootlessRuntimeDir if set
+ - Cherry-pick moby/moby #39292 for CVE-2018-15664 fixes
+ - lockfile: add RecursiveLock() API
+ - Update generated files
+ - Fix crash on tesing of aufs code
+ - Let consumers know when Layers and Images came from read-only stores
+ - chown: do not change owner for the mountpoint
+ - locks: correctly mark updates to the layers list
+ - CreateContainer: don't worry about mapping layers unless necessary
+ - docs: fix manpage for containers-storage.conf
+ - docs: sort configuration options alphabetically
+ - docs: document OSTree file deduplication
+ - Add missing options to man page for containers-storage
+ - overlay: use the layer idmapping if present
+ - vfs: prefer layer custom idmappings
+ - layers: propagate down the idmapping settings
+ - Recreate symlink when not found
+ - docs: fix manpage for configuration file
+ - docs: add special handling for manpages in sect 5
+ - overlay: fix single-lower test
+ - Recreate symlink when not found
+ - overlay: propagate errors from mountProgram
+ - utils: root in a userns uses global conf file
+ - Fix handling of additional stores
+ - Correctly check permissions on rootless directory
+ - Fix possible integer overflow on 32bit builds
+ - Evaluate device path for lvm
+ - lockfile test: make concurrent RW test determinisitc
+ - lockfile test: make concurrent read tests deterministic
+ - drivers.DirCopy: fix filemode detection
+ - storage: move the logic to detect rootless into utils.go
+ - Don't set (struct flock).l_pid
+ - Improve documentation of getLockfile
+ - Rename getLockFile to createLockerForPath, and document it
+ - Add FILES section to containers-storage.5 man page
+ - add digest locks
+ - drivers/copy: add a non-cgo fallback
+- Add default SLES mounts for container-suseconnect usage
+
-------------------------------------------------------------------
Tue Jun 4 14:27:15 UTC 2019 - Richard Brown
@@ -37,7 +143,7 @@ Tue Feb 19 15:34:54 UTC 2019 - Richard Brown
-------------------------------------------------------------------
Sat Feb 2 11:07:30 UTC 2019 - Richard Brown
-- Restore non-upstream storage.conf, needed by CRI-O
+- Restore non-upstream storage.conf, needed by CRI-O
-------------------------------------------------------------------
Fri Jan 25 14:30:45 UTC 2019 - Richard Brown
@@ -76,12 +182,12 @@ Tue Jan 8 11:35:41 UTC 2019 - Richard Brown
-------------------------------------------------------------------
Sun Jan 6 22:11:02 UTC 2019 - Richard Brown
-- storage.conf - restore btrfs as the default driver
+- storage.conf - restore btrfs as the default driver
-------------------------------------------------------------------
Fri Dec 7 10:54:37 UTC 2018 - Richard Brown
-- Update to latest libpod and storage to support cri-o 1.13
+- Update to latest libpod and storage to support cri-o 1.13
-------------------------------------------------------------------
Wed Dec 5 14:45:37 UTC 2018 - Richard Brown
diff --git a/libcontainers-common.spec b/libcontainers-common.spec
index 369db0d..7da5dee 100644
--- a/libcontainers-common.spec
+++ b/libcontainers-common.spec
@@ -16,13 +16,13 @@
#
# libpodver - version from containers/libpod
-%define libpodver 1.2.0
+%define libpodver 1.4.0
# storagever - version from containers/storage
-%define storagever 1.12.1
+%define storagever 1.12.10
# imagever - version from containers/image
-%define imagever 1.5
+%define imagever 1.5.1
Name: libcontainers-common
Version: 20190401
@@ -85,6 +85,15 @@ cd libpod-%{libpodver}
go-md2man -in pkg/hooks/docs/oci-hooks.5.md -out pkg/hooks/docs/oci-hooks.5
cd ..
+%if 0%{?is_opensuse}
+# no default mounts
+%else
+cat >>%{SOURCE5} <