update splink/st, security concern