Security update: core