diff --git a/lower-constraints.txt b/lower-constraints.txt
index 252a45abc..001f03c83 100644
--- a/lower-constraints.txt
+++ b/lower-constraints.txt
@@ -4,12 +4,12 @@ appdirs==1.3.0
 asn1crypto==0.23.0
 Babel==2.3.4
 cachetools==2.0.0
-cffi==1.7.0
-cliff==2.8.0
+cffi==1.14.0
+cliff==3.4.0
 cmd2==0.8.0
 contextlib2==0.4.0
 coverage==4.0
-cryptography==2.1
+cryptography==2.7
 debtcollector==1.2.0
 decorator==3.4.0
 deprecation==1.0
@@ -47,7 +47,7 @@ netifaces==0.10.4
 openstacksdk==0.11.2
 os-client-config==1.28.0
 os-service-types==1.2.0
-osc-lib==1.8.0
+osc-lib==1.12.0
 oslo.concurrency==3.25.0
 oslo.config==5.2.0
 oslo.context==2.19.2
@@ -86,7 +86,7 @@ python-novaclient==9.1.0
 python-openstackclient==3.12.0
 python-subunit==1.0.0
 pytz==2013.6
-PyYAML==3.12
+PyYAML==3.13
 repoze.lru==0.7
 requests-mock==1.2.0
 requests==2.14.2
diff --git a/requirements.txt b/requirements.txt
index c1c9c28e3..d10083c26 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,11 +2,11 @@
 # of appearance. Changing the order has an impact on the overall integration
 # process, which may cause wedges in the gate later.
 pbr!=2.1.0,>=2.0.0 # Apache-2.0
-cliff!=2.9.0,>=2.8.0 # Apache-2.0
+cliff>=3.4.0 # Apache-2.0
 debtcollector>=1.2.0 # Apache-2.0
 iso8601>=0.1.11 # MIT
 netaddr>=0.7.18 # BSD
-osc-lib>=1.8.0 # Apache-2.0
+osc-lib>=1.12.0 # Apache-2.0
 oslo.i18n>=3.15.3 # Apache-2.0
 oslo.log>=3.36.0 # Apache-2.0
 oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0