diff --git a/neutron/tests/contrib/gate_hook.sh b/neutron/tests/contrib/gate_hook.sh
index ac06830874b..6aff0e54835 100644
--- a/neutron/tests/contrib/gate_hook.sh
+++ b/neutron/tests/contrib/gate_hook.sh
@@ -82,6 +82,13 @@ case $VENV in
         # See commit 138df3e563de9da0e5a4155b3534a69621495742 (on the ovs repo).
         OVS_BRANCH="138df3e563de9da0e5a4155b3534a69621495742"
         compile_ovs_kernel_module
+    elif [[ "$VENV" =~ "dsvm-functional" ]]; then
+        # NOTE(slaweq): there is some bug in keepalived
+        # 1:1.2.24-1ubuntu0.16.04.1, and because of that we have to use older
+        # version for tests as workaround. For details check
+        # https://bugs.launchpad.net/neutron/+bug/1788185
+        # https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1789045
+        sudo apt-get install -y --allow-downgrades keepalived=1:1.2.19-1
     fi
 
     # prepare base environment for ./stack.sh
diff --git a/test-requirements.txt b/test-requirements.txt
index 5b087c9d451..9a326f249cd 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -3,7 +3,7 @@
 # process, which may cause wedges in the gate later.
 hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0
 
-bandit>=1.1.0 # Apache-2.0
+bandit>=1.1.0,<1.5.0 # Apache-2.0
 coverage!=4.4,>=4.0 # Apache-2.0
 fixtures>=3.0.0 # Apache-2.0/BSD
 flake8-import-order==0.12 # LGPLv3