config, security update