update st, security fix