Security fixes Update containerd to 1.4.8 (#1661) Update systemd to 247.8 (#1662) Update 5.4 and 5.10 kernels (#1665) Set permissions to root-only for /var/lib/systemd/random-seed (#1656)