[release/1.3 backport] Pick up fix for CVE-2019-16884 in opencontainers/selinux

[dims]

Picking up the changes in the following diff:
https://github.com/containerd/containerd/compare/master...dims:bump-opencontainers/selinux-for-CVE-2019-16884-release-1.3?expand=1

specifically so we can include:
opencontainers/selinux@03b517d

[theopenlab-ci]

Build succeeded.

• containerd-build-arm64 : SUCCESS in 4m 52s (non-voting)

[codecov-io]

Codecov Report

Merging #3980 into release/1.3 will decrease coverage by 5%.
The diff coverage is n/a.

@@               Coverage Diff               @@
##           release/1.3    #3980      +/-   ##
===============================================
- Coverage        42.31%   37.31%   -5.01%     
===============================================
  Files              129       87      -42     
  Lines            14341    12010    -2331     
===============================================
- Hits              6069     4482    -1587     
+ Misses            7373     6916     -457     
+ Partials           899      612     -287

Flag	Coverage Δ
#linux	?
#windows	37.31% <ø> (ø)	⬆️

Impacted Files	Coverage Δ
archive/tar_opts.go	11.76% <0%> (-47.06%)	⬇️
cio/io.go	1.4% <0%> (-45.08%)	⬇️
snapshots/native/native.go	1.73% <0%> (-40.7%)	⬇️
archive/tar.go	18.95% <0%> (-29.24%)	⬇️
metadata/snapshot.go	23.9% <0%> (-23.91%)	⬇️
oci/spec_opts.go	28.93% <0%> (-2.3%)	⬇️
gc/scheduler/scheduler.go	66.34% <0%> (-0.97%)	⬇️
content/local/writer.go	57.69% <0%> (-0.97%)	⬇️
mount/temp_unix.go
sys/reaper_linux.go
... and 40 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update da15d82...3074db3. Read the comment docs.

[estesp]

LGTM