diff --git a/requirements.txt b/requirements.txt
index 6a3bae9dd..17d1f5101 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,7 +4,7 @@
 
 pbr>=1.8 # Apache-2.0
 Babel>=2.3.4 # BSD
-lxml>=2.3 # BSD
+lxml!=3.7.0,>=2.3 # BSD
 python-ceilometerclient>=2.5.0 # Apache-2.0
 python-cinderclient!=1.7.0,!=1.7.1,>=1.6.0 # Apache-2.0
 python-dateutil>=2.4.2 # BSD
@@ -23,7 +23,7 @@ oslo.i18n>=2.1.0 # Apache-2.0
 pecan!=1.0.2,!=1.0.3,!=1.0.4,!=1.2,>=1.0.0 # BSD
 PasteDeploy>=1.5.0 # MIT
 Werkzeug>=0.7 # BSD License
-keystonemiddleware!=4.5.0,>=4.2.0 # Apache-2.0
+keystonemiddleware>=4.12.0 # Apache-2.0
 stevedore>=1.17.1 # Apache-2.0
 voluptuous>=0.8.9 # BSD License
 sympy>=0.7.6 # BSD
diff --git a/test-requirements.txt b/test-requirements.txt
index 07359c8a8..bcb362e38 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -5,7 +5,7 @@
 hacking<0.11,>=0.10.0
 python-dateutil>=2.4.2 # BSD
 coverage>=4.0 # Apache-2.0
-lxml>=2.3 # BSD
+lxml!=3.7.0,>=2.3 # BSD
 networkx>=1.10 # BSD
 python-ceilometerclient>=2.5.0 # Apache-2.0
 python-cinderclient!=1.7.0,!=1.7.1,>=1.6.0 # Apache-2.0