Update third party lib versions

Update properties for third party library versions to match values
from ODL odlparent pom.

Change-Id: Iae263e39461e6db8b7107f3760973d771749ec3e
Issue-ID: CCSDK-174
Signed-off-by: Dan Timoney <dtimoney@att.com>

8 files changed, 81 insertions, 83 deletions

diff --git a/odlparent/binding-parent/pom.xml b/odlparent/binding-parent/pom.xml
index 28b1da67..a4e65f56 100755
--- a/odlparent/binding-parent/pom.xml
+++ b/odlparent/binding-parent/pom.xml
@@ -106,19 +106,19 @@
         <!-- Used by aaa, vtn -->
         <commons.codec.version>1.10</commons.codec.version>
         <!-- Used by netconf, ovsdb -->
-        <commons.lang3.version>3.4</commons.lang3.version>
+        <commons.lang3.version>3.6</commons.lang3.version>
         <!-- Used by sfc, snmp4sdn; see also affinity, toolkit -->
         <commons.lang.version>2.6</commons.lang.version>
         <!-- Used by neutron; see also controller, vtn -->
-        <commons.net.version>3.5</commons.net.version>
+        <commons.net.version>3.6</commons.net.version>
         <!-- Used by neutron -->
         <eclipse.persistence.version>2.6.2</eclipse.persistence.version>
         <!-- Used by aaa -->
         <felix.dependencymanager.version>4.3.0</felix.dependencymanager.version>
         <!-- Used by lacp, netconf, ovsdb, sfc, toolkit; see also vtn -->
-        <gson.version>2.3.1</gson.version>
+        <gson.version>2.7</gson.version>
         <!-- Used by aaa, dlux, persistence, snmp4sdn, sxp -->
-        <guava.version>18.0</guava.version>
+        <guava.version>22.0</guava.version>
         <!-- Used by lispflowmapping, sxp, vtn/manager -->
         <hamcrest.version>1.3</hamcrest.version>
         <!-- Used by aaa, alto, netconf, ovsdb, sfc; see also affinity, defense4all,
@@ -141,7 +141,7 @@
         <org.json.version>20131018</org.json.version>
 
         <!-- Used by sfc -->
-        <jettison.version>1.3.6</jettison.version>
+        <jettison.version>1.3.7</jettison.version>
         <!-- Used by persistence -->
         <jsr305.api.version>3.0.0</jsr305.api.version>
         <!-- Need to stick to JUnit 4.11 until https://github.com/jayway/powermock/issues/560
@@ -150,17 +150,17 @@
         <junit.version>4.11</junit.version>
         <!-- Used by coretutorials, sfc, snmp4sdn, sxp; see also affinity,
             toolkit -->
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.2</logback.version>
         <!-- Used by nic, sfc, sxp, tsdr -->
         <mockito.version>1.10.19</mockito.version>
         <!-- Used by bgpcep, netconf, ovsdb, sxp; see also opendove, toolkit -->
-        <netty.version>4.0.44.Final</netty.version>
+        <netty.version>4.1.8.Final</netty.version>
         <!-- Used by openflowjava, persistence, sfc, snmp4sdn, sxp; see also
             affinity, toolkit -->
         <slf4j.version>1.7.21</slf4j.version>
         <!-- Used in integration/distribution; see also affinity, snmp4sdn,
             toolkit, tsdr, ttp -->
-        <spring.version>3.2.14.RELEASE</spring.version>
+        <spring.version>3.2.17.RELEASE</spring.version>
 
 
 
@@ -168,8 +168,8 @@
         <equinox.osgi.version>3.8.1.v20120830-144521</equinox.osgi.version>
         <jackson-annotations-version>${jackson.version}</jackson-annotations-version>
         <jvnet.jaxb2.version>0.6.4</jvnet.jaxb2.version>
-        <apache.httpcomponents.core.version>4.3.2</apache.httpcomponents.core.version>
-        <apache.httpcomponents.client.version>4.3.3</apache.httpcomponents.client.version>
+        <apache.httpcomponents.core.version>4.4.4</apache.httpcomponents.core.version>
+        <apache.httpcomponents.client.version>4.5.2</apache.httpcomponents.client.version>
         <antlr.version>4.5.1</antlr.version>
         <mysql.connector.version>5.1.39</mysql.connector.version>
         <mariadb.connector.version>2.1.1</mariadb.connector.version>
@@ -178,7 +178,6 @@
         <tomcat-jdbc.version>8.5.14</tomcat-jdbc.version>
     </properties>
 
-
     <profiles>
         <!-- Profiles from ONAP oparent -->
         <profile>
diff --git a/odlparent/bundle-parent/pom.xml b/odlparent/bundle-parent/pom.xml
index 97ec0b46..fa7f265b 100755
--- a/odlparent/bundle-parent/pom.xml
+++ b/odlparent/bundle-parent/pom.xml
@@ -106,19 +106,19 @@
         <!-- Used by aaa, vtn -->
         <commons.codec.version>1.10</commons.codec.version>
         <!-- Used by netconf, ovsdb -->
-        <commons.lang3.version>3.4</commons.lang3.version>
+        <commons.lang3.version>3.6</commons.lang3.version>
         <!-- Used by sfc, snmp4sdn; see also affinity, toolkit -->
         <commons.lang.version>2.6</commons.lang.version>
         <!-- Used by neutron; see also controller, vtn -->
-        <commons.net.version>3.5</commons.net.version>
+        <commons.net.version>3.6</commons.net.version>
         <!-- Used by neutron -->
         <eclipse.persistence.version>2.6.2</eclipse.persistence.version>
         <!-- Used by aaa -->
         <felix.dependencymanager.version>4.3.0</felix.dependencymanager.version>
         <!-- Used by lacp, netconf, ovsdb, sfc, toolkit; see also vtn -->
-        <gson.version>2.3.1</gson.version>
+        <gson.version>2.7</gson.version>
         <!-- Used by aaa, dlux, persistence, snmp4sdn, sxp -->
-        <guava.version>18.0</guava.version>
+        <guava.version>22.0</guava.version>
         <!-- Used by lispflowmapping, sxp, vtn/manager -->
         <hamcrest.version>1.3</hamcrest.version>
         <!-- Used by aaa, alto, netconf, ovsdb, sfc; see also affinity, defense4all,
@@ -141,7 +141,7 @@
         <org.json.version>20131018</org.json.version>
 
         <!-- Used by sfc -->
-        <jettison.version>1.3.6</jettison.version>
+        <jettison.version>1.3.7</jettison.version>
         <!-- Used by persistence -->
         <jsr305.api.version>3.0.0</jsr305.api.version>
         <!-- Need to stick to JUnit 4.11 until https://github.com/jayway/powermock/issues/560
@@ -150,17 +150,17 @@
         <junit.version>4.11</junit.version>
         <!-- Used by coretutorials, sfc, snmp4sdn, sxp; see also affinity,
             toolkit -->
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.2</logback.version>
         <!-- Used by nic, sfc, sxp, tsdr -->
         <mockito.version>1.10.19</mockito.version>
         <!-- Used by bgpcep, netconf, ovsdb, sxp; see also opendove, toolkit -->
-        <netty.version>4.0.44.Final</netty.version>
+        <netty.version>4.1.8.Final</netty.version>
         <!-- Used by openflowjava, persistence, sfc, snmp4sdn, sxp; see also
             affinity, toolkit -->
         <slf4j.version>1.7.21</slf4j.version>
         <!-- Used in integration/distribution; see also affinity, snmp4sdn,
             toolkit, tsdr, ttp -->
-        <spring.version>3.2.14.RELEASE</spring.version>
+        <spring.version>3.2.17.RELEASE</spring.version>
 
 
 
@@ -168,8 +168,8 @@
         <equinox.osgi.version>3.8.1.v20120830-144521</equinox.osgi.version>
         <jackson-annotations-version>${jackson.version}</jackson-annotations-version>
         <jvnet.jaxb2.version>0.6.4</jvnet.jaxb2.version>
-        <apache.httpcomponents.core.version>4.3.2</apache.httpcomponents.core.version>
-        <apache.httpcomponents.client.version>4.3.3</apache.httpcomponents.client.version>
+        <apache.httpcomponents.core.version>4.4.4</apache.httpcomponents.core.version>
+        <apache.httpcomponents.client.version>4.5.2</apache.httpcomponents.client.version>
         <antlr.version>4.5.1</antlr.version>
         <mysql.connector.version>5.1.39</mysql.connector.version>
         <mariadb.connector.version>2.1.1</mariadb.connector.version>
diff --git a/odlparent/feature-repo-parent/pom.xml b/odlparent/feature-repo-parent/pom.xml
index 219a074f..f2407821 100755
--- a/odlparent/feature-repo-parent/pom.xml
+++ b/odlparent/feature-repo-parent/pom.xml
@@ -106,19 +106,19 @@
         <!-- Used by aaa, vtn -->
         <commons.codec.version>1.10</commons.codec.version>
         <!-- Used by netconf, ovsdb -->
-        <commons.lang3.version>3.4</commons.lang3.version>
+        <commons.lang3.version>3.6</commons.lang3.version>
         <!-- Used by sfc, snmp4sdn; see also affinity, toolkit -->
         <commons.lang.version>2.6</commons.lang.version>
         <!-- Used by neutron; see also controller, vtn -->
-        <commons.net.version>3.5</commons.net.version>
+        <commons.net.version>3.6</commons.net.version>
         <!-- Used by neutron -->
         <eclipse.persistence.version>2.6.2</eclipse.persistence.version>
         <!-- Used by aaa -->
         <felix.dependencymanager.version>4.3.0</felix.dependencymanager.version>
         <!-- Used by lacp, netconf, ovsdb, sfc, toolkit; see also vtn -->
-        <gson.version>2.3.1</gson.version>
+        <gson.version>2.7</gson.version>
         <!-- Used by aaa, dlux, persistence, snmp4sdn, sxp -->
-        <guava.version>18.0</guava.version>
+        <guava.version>22.0</guava.version>
         <!-- Used by lispflowmapping, sxp, vtn/manager -->
         <hamcrest.version>1.3</hamcrest.version>
         <!-- Used by aaa, alto, netconf, ovsdb, sfc; see also affinity, defense4all,
@@ -141,7 +141,7 @@
         <org.json.version>20131018</org.json.version>
 
         <!-- Used by sfc -->
-        <jettison.version>1.3.6</jettison.version>
+        <jettison.version>1.3.7</jettison.version>
         <!-- Used by persistence -->
         <jsr305.api.version>3.0.0</jsr305.api.version>
         <!-- Need to stick to JUnit 4.11 until https://github.com/jayway/powermock/issues/560
@@ -150,17 +150,17 @@
         <junit.version>4.11</junit.version>
         <!-- Used by coretutorials, sfc, snmp4sdn, sxp; see also affinity,
             toolkit -->
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.2</logback.version>
         <!-- Used by nic, sfc, sxp, tsdr -->
         <mockito.version>1.10.19</mockito.version>
         <!-- Used by bgpcep, netconf, ovsdb, sxp; see also opendove, toolkit -->
-        <netty.version>4.0.44.Final</netty.version>
+        <netty.version>4.1.8.Final</netty.version>
         <!-- Used by openflowjava, persistence, sfc, snmp4sdn, sxp; see also
             affinity, toolkit -->
         <slf4j.version>1.7.21</slf4j.version>
         <!-- Used in integration/distribution; see also affinity, snmp4sdn,
             toolkit, tsdr, ttp -->
-        <spring.version>3.2.14.RELEASE</spring.version>
+        <spring.version>3.2.17.RELEASE</spring.version>
 
 
 
@@ -168,8 +168,8 @@
         <equinox.osgi.version>3.8.1.v20120830-144521</equinox.osgi.version>
         <jackson-annotations-version>${jackson.version}</jackson-annotations-version>
         <jvnet.jaxb2.version>0.6.4</jvnet.jaxb2.version>
-        <apache.httpcomponents.core.version>4.3.2</apache.httpcomponents.core.version>
-        <apache.httpcomponents.client.version>4.3.3</apache.httpcomponents.client.version>
+        <apache.httpcomponents.core.version>4.4.4</apache.httpcomponents.core.version>
+        <apache.httpcomponents.client.version>4.5.2</apache.httpcomponents.client.version>
         <antlr.version>4.5.1</antlr.version>
         <mysql.connector.version>5.1.39</mysql.connector.version>
         <mariadb.connector.version>2.1.1</mariadb.connector.version>
diff --git a/odlparent/karaf4-parent/pom.xml b/odlparent/karaf4-parent/pom.xml
index 832efc87..e9fe90f3 100755
--- a/odlparent/karaf4-parent/pom.xml
+++ b/odlparent/karaf4-parent/pom.xml
@@ -106,19 +106,19 @@
         <!-- Used by aaa, vtn -->
         <commons.codec.version>1.10</commons.codec.version>
         <!-- Used by netconf, ovsdb -->
-        <commons.lang3.version>3.4</commons.lang3.version>
+        <commons.lang3.version>3.6</commons.lang3.version>
         <!-- Used by sfc, snmp4sdn; see also affinity, toolkit -->
         <commons.lang.version>2.6</commons.lang.version>
         <!-- Used by neutron; see also controller, vtn -->
-        <commons.net.version>3.5</commons.net.version>
+        <commons.net.version>3.6</commons.net.version>
         <!-- Used by neutron -->
         <eclipse.persistence.version>2.6.2</eclipse.persistence.version>
         <!-- Used by aaa -->
         <felix.dependencymanager.version>4.3.0</felix.dependencymanager.version>
         <!-- Used by lacp, netconf, ovsdb, sfc, toolkit; see also vtn -->
-        <gson.version>2.3.1</gson.version>
+        <gson.version>2.7</gson.version>
         <!-- Used by aaa, dlux, persistence, snmp4sdn, sxp -->
-        <guava.version>18.0</guava.version>
+        <guava.version>22.0</guava.version>
         <!-- Used by lispflowmapping, sxp, vtn/manager -->
         <hamcrest.version>1.3</hamcrest.version>
         <!-- Used by aaa, alto, netconf, ovsdb, sfc; see also affinity, defense4all,
@@ -141,7 +141,7 @@
         <org.json.version>20131018</org.json.version>
 
         <!-- Used by sfc -->
-        <jettison.version>1.3.6</jettison.version>
+        <jettison.version>1.3.7</jettison.version>
         <!-- Used by persistence -->
         <jsr305.api.version>3.0.0</jsr305.api.version>
         <!-- Need to stick to JUnit 4.11 until https://github.com/jayway/powermock/issues/560
@@ -150,17 +150,17 @@
         <junit.version>4.11</junit.version>
         <!-- Used by coretutorials, sfc, snmp4sdn, sxp; see also affinity,
             toolkit -->
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.2</logback.version>
         <!-- Used by nic, sfc, sxp, tsdr -->
         <mockito.version>1.10.19</mockito.version>
         <!-- Used by bgpcep, netconf, ovsdb, sxp; see also opendove, toolkit -->
-        <netty.version>4.0.44.Final</netty.version>
+        <netty.version>4.1.8.Final</netty.version>
         <!-- Used by openflowjava, persistence, sfc, snmp4sdn, sxp; see also
             affinity, toolkit -->
         <slf4j.version>1.7.21</slf4j.version>
         <!-- Used in integration/distribution; see also affinity, snmp4sdn,
             toolkit, tsdr, ttp -->
-        <spring.version>3.2.14.RELEASE</spring.version>
+        <spring.version>3.2.17.RELEASE</spring.version>
 
 
 
@@ -168,8 +168,8 @@
         <equinox.osgi.version>3.8.1.v20120830-144521</equinox.osgi.version>
         <jackson-annotations-version>${jackson.version}</jackson-annotations-version>
         <jvnet.jaxb2.version>0.6.4</jvnet.jaxb2.version>
-        <apache.httpcomponents.core.version>4.3.2</apache.httpcomponents.core.version>
-        <apache.httpcomponents.client.version>4.3.3</apache.httpcomponents.client.version>
+        <apache.httpcomponents.core.version>4.4.4</apache.httpcomponents.core.version>
+        <apache.httpcomponents.client.version>4.5.2</apache.httpcomponents.client.version>
         <antlr.version>4.5.1</antlr.version>
         <mysql.connector.version>5.1.39</mysql.connector.version>
         <mariadb.connector.version>2.1.1</mariadb.connector.version>
diff --git a/odlparent/mdsal-it-parent/pom.xml b/odlparent/mdsal-it-parent/pom.xml
index 56087933..cdffb18a 100755
--- a/odlparent/mdsal-it-parent/pom.xml
+++ b/odlparent/mdsal-it-parent/pom.xml
@@ -106,19 +106,19 @@
         <!-- Used by aaa, vtn -->
         <commons.codec.version>1.10</commons.codec.version>
         <!-- Used by netconf, ovsdb -->
-        <commons.lang3.version>3.4</commons.lang3.version>
+        <commons.lang3.version>3.6</commons.lang3.version>
         <!-- Used by sfc, snmp4sdn; see also affinity, toolkit -->
         <commons.lang.version>2.6</commons.lang.version>
         <!-- Used by neutron; see also controller, vtn -->
-        <commons.net.version>3.5</commons.net.version>
+        <commons.net.version>3.6</commons.net.version>
         <!-- Used by neutron -->
         <eclipse.persistence.version>2.6.2</eclipse.persistence.version>
         <!-- Used by aaa -->
         <felix.dependencymanager.version>4.3.0</felix.dependencymanager.version>
         <!-- Used by lacp, netconf, ovsdb, sfc, toolkit; see also vtn -->
-        <gson.version>2.3.1</gson.version>
+        <gson.version>2.7</gson.version>
         <!-- Used by aaa, dlux, persistence, snmp4sdn, sxp -->
-        <guava.version>18.0</guava.version>
+        <guava.version>22.0</guava.version>
         <!-- Used by lispflowmapping, sxp, vtn/manager -->
         <hamcrest.version>1.3</hamcrest.version>
         <!-- Used by aaa, alto, netconf, ovsdb, sfc; see also affinity, defense4all,
@@ -141,7 +141,7 @@
         <org.json.version>20131018</org.json.version>
 
         <!-- Used by sfc -->
-        <jettison.version>1.3.6</jettison.version>
+        <jettison.version>1.3.7</jettison.version>
         <!-- Used by persistence -->
         <jsr305.api.version>3.0.0</jsr305.api.version>
         <!-- Need to stick to JUnit 4.11 until https://github.com/jayway/powermock/issues/560
@@ -150,17 +150,17 @@
         <junit.version>4.11</junit.version>
         <!-- Used by coretutorials, sfc, snmp4sdn, sxp; see also affinity,
             toolkit -->
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.2</logback.version>
         <!-- Used by nic, sfc, sxp, tsdr -->
         <mockito.version>1.10.19</mockito.version>
         <!-- Used by bgpcep, netconf, ovsdb, sxp; see also opendove, toolkit -->
-        <netty.version>4.0.44.Final</netty.version>
+        <netty.version>4.1.8.Final</netty.version>
         <!-- Used by openflowjava, persistence, sfc, snmp4sdn, sxp; see also
             affinity, toolkit -->
         <slf4j.version>1.7.21</slf4j.version>
         <!-- Used in integration/distribution; see also affinity, snmp4sdn,
             toolkit, tsdr, ttp -->
-        <spring.version>3.2.14.RELEASE</spring.version>
+        <spring.version>3.2.17.RELEASE</spring.version>
 
 
 
@@ -168,8 +168,8 @@
         <equinox.osgi.version>3.8.1.v20120830-144521</equinox.osgi.version>
         <jackson-annotations-version>${jackson.version}</jackson-annotations-version>
         <jvnet.jaxb2.version>0.6.4</jvnet.jaxb2.version>
-        <apache.httpcomponents.core.version>4.3.2</apache.httpcomponents.core.version>
-        <apache.httpcomponents.client.version>4.3.3</apache.httpcomponents.client.version>
+        <apache.httpcomponents.core.version>4.4.4</apache.httpcomponents.core.version>
+        <apache.httpcomponents.client.version>4.5.2</apache.httpcomponents.client.version>
         <antlr.version>4.5.1</antlr.version>
         <mysql.connector.version>5.1.39</mysql.connector.version>
         <mariadb.connector.version>2.1.1</mariadb.connector.version>
diff --git a/odlparent/odlparent-lite/pom.xml b/odlparent/odlparent-lite/pom.xml
index 4d445d43..3ebc367f 100755
--- a/odlparent/odlparent-lite/pom.xml
+++ b/odlparent/odlparent-lite/pom.xml
@@ -106,19 +106,19 @@
         <!-- Used by aaa, vtn -->
         <commons.codec.version>1.10</commons.codec.version>
         <!-- Used by netconf, ovsdb -->
-        <commons.lang3.version>3.4</commons.lang3.version>
+        <commons.lang3.version>3.6</commons.lang3.version>
         <!-- Used by sfc, snmp4sdn; see also affinity, toolkit -->
         <commons.lang.version>2.6</commons.lang.version>
         <!-- Used by neutron; see also controller, vtn -->
-        <commons.net.version>3.5</commons.net.version>
+        <commons.net.version>3.6</commons.net.version>
         <!-- Used by neutron -->
         <eclipse.persistence.version>2.6.2</eclipse.persistence.version>
         <!-- Used by aaa -->
         <felix.dependencymanager.version>4.3.0</felix.dependencymanager.version>
         <!-- Used by lacp, netconf, ovsdb, sfc, toolkit; see also vtn -->
-        <gson.version>2.3.1</gson.version>
+        <gson.version>2.7</gson.version>
         <!-- Used by aaa, dlux, persistence, snmp4sdn, sxp -->
-        <guava.version>18.0</guava.version>
+        <guava.version>22.0</guava.version>
         <!-- Used by lispflowmapping, sxp, vtn/manager -->
         <hamcrest.version>1.3</hamcrest.version>
         <!-- Used by aaa, alto, netconf, ovsdb, sfc; see also affinity, defense4all,
@@ -141,7 +141,7 @@
         <org.json.version>20131018</org.json.version>
 
         <!-- Used by sfc -->
-        <jettison.version>1.3.6</jettison.version>
+        <jettison.version>1.3.7</jettison.version>
         <!-- Used by persistence -->
         <jsr305.api.version>3.0.0</jsr305.api.version>
         <!-- Need to stick to JUnit 4.11 until https://github.com/jayway/powermock/issues/560
@@ -150,17 +150,17 @@
         <junit.version>4.11</junit.version>
         <!-- Used by coretutorials, sfc, snmp4sdn, sxp; see also affinity,
             toolkit -->
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.2</logback.version>
         <!-- Used by nic, sfc, sxp, tsdr -->
         <mockito.version>1.10.19</mockito.version>
         <!-- Used by bgpcep, netconf, ovsdb, sxp; see also opendove, toolkit -->
-        <netty.version>4.0.44.Final</netty.version>
+        <netty.version>4.1.8.Final</netty.version>
         <!-- Used by openflowjava, persistence, sfc, snmp4sdn, sxp; see also
             affinity, toolkit -->
         <slf4j.version>1.7.21</slf4j.version>
         <!-- Used in integration/distribution; see also affinity, snmp4sdn,
             toolkit, tsdr, ttp -->
-        <spring.version>3.2.14.RELEASE</spring.version>
+        <spring.version>3.2.17.RELEASE</spring.version>
 
 
 
@@ -168,8 +168,8 @@
         <equinox.osgi.version>3.8.1.v20120830-144521</equinox.osgi.version>
         <jackson-annotations-version>${jackson.version}</jackson-annotations-version>
         <jvnet.jaxb2.version>0.6.4</jvnet.jaxb2.version>
-        <apache.httpcomponents.core.version>4.3.2</apache.httpcomponents.core.version>
-        <apache.httpcomponents.client.version>4.3.3</apache.httpcomponents.client.version>
+        <apache.httpcomponents.core.version>4.4.4</apache.httpcomponents.core.version>
+        <apache.httpcomponents.client.version>4.5.2</apache.httpcomponents.client.version>
         <antlr.version>4.5.1</antlr.version>
         <mysql.connector.version>5.1.39</mysql.connector.version>
         <mariadb.connector.version>2.1.1</mariadb.connector.version>
diff --git a/odlparent/odlparent/pom.xml b/odlparent/odlparent/pom.xml
index 41250e76..68ebef12 100755
--- a/odlparent/odlparent/pom.xml
+++ b/odlparent/odlparent/pom.xml
@@ -106,19 +106,19 @@
         <!-- Used by aaa, vtn -->
         <commons.codec.version>1.10</commons.codec.version>
         <!-- Used by netconf, ovsdb -->
-        <commons.lang3.version>3.4</commons.lang3.version>
+        <commons.lang3.version>3.6</commons.lang3.version>
         <!-- Used by sfc, snmp4sdn; see also affinity, toolkit -->
         <commons.lang.version>2.6</commons.lang.version>
         <!-- Used by neutron; see also controller, vtn -->
-        <commons.net.version>3.5</commons.net.version>
+        <commons.net.version>3.6</commons.net.version>
         <!-- Used by neutron -->
         <eclipse.persistence.version>2.6.2</eclipse.persistence.version>
         <!-- Used by aaa -->
         <felix.dependencymanager.version>4.3.0</felix.dependencymanager.version>
         <!-- Used by lacp, netconf, ovsdb, sfc, toolkit; see also vtn -->
-        <gson.version>2.3.1</gson.version>
+        <gson.version>2.7</gson.version>
         <!-- Used by aaa, dlux, persistence, snmp4sdn, sxp -->
-        <guava.version>18.0</guava.version>
+        <guava.version>22.0</guava.version>
         <!-- Used by lispflowmapping, sxp, vtn/manager -->
         <hamcrest.version>1.3</hamcrest.version>
         <!-- Used by aaa, alto, netconf, ovsdb, sfc; see also affinity, defense4all,
@@ -141,7 +141,7 @@
         <org.json.version>20131018</org.json.version>
 
         <!-- Used by sfc -->
-        <jettison.version>1.3.6</jettison.version>
+        <jettison.version>1.3.7</jettison.version>
         <!-- Used by persistence -->
         <jsr305.api.version>3.0.0</jsr305.api.version>
         <!-- Need to stick to JUnit 4.11 until https://github.com/jayway/powermock/issues/560
@@ -150,17 +150,17 @@
         <junit.version>4.11</junit.version>
         <!-- Used by coretutorials, sfc, snmp4sdn, sxp; see also affinity,
             toolkit -->
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.2</logback.version>
         <!-- Used by nic, sfc, sxp, tsdr -->
         <mockito.version>1.10.19</mockito.version>
         <!-- Used by bgpcep, netconf, ovsdb, sxp; see also opendove, toolkit -->
-        <netty.version>4.0.44.Final</netty.version>
+        <netty.version>4.1.8.Final</netty.version>
         <!-- Used by openflowjava, persistence, sfc, snmp4sdn, sxp; see also
             affinity, toolkit -->
         <slf4j.version>1.7.21</slf4j.version>
         <!-- Used in integration/distribution; see also affinity, snmp4sdn,
             toolkit, tsdr, ttp -->
-        <spring.version>3.2.14.RELEASE</spring.version>
+        <spring.version>3.2.17.RELEASE</spring.version>
 
 
 
@@ -168,8 +168,8 @@
         <equinox.osgi.version>3.8.1.v20120830-144521</equinox.osgi.version>
         <jackson-annotations-version>${jackson.version}</jackson-annotations-version>
         <jvnet.jaxb2.version>0.6.4</jvnet.jaxb2.version>
-        <apache.httpcomponents.core.version>4.3.2</apache.httpcomponents.core.version>
-        <apache.httpcomponents.client.version>4.3.3</apache.httpcomponents.client.version>
+        <apache.httpcomponents.core.version>4.4.4</apache.httpcomponents.core.version>
+        <apache.httpcomponents.client.version>4.5.2</apache.httpcomponents.client.version>
         <antlr.version>4.5.1</antlr.version>
         <mysql.connector.version>5.1.39</mysql.connector.version>
         <mariadb.connector.version>2.1.1</mariadb.connector.version>
@@ -178,7 +178,6 @@
         <tomcat-jdbc.version>8.5.14</tomcat-jdbc.version>
     </properties>
 
-
     <profiles>
         <!-- Profiles from ONAP oparent -->
         <profile>
@@ -1153,7 +1152,7 @@
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>versions-maven-plugin</artifactId>
                 <version>2.5</version>
-                 <configuration>
+                <configuration>
                     <processAllModules>true</processAllModules>
                 </configuration>
             </plugin>
diff --git a/odlparent/single-feature-parent/pom.xml b/odlparent/single-feature-parent/pom.xml
index 3b83b256..66a49f9f 100755
--- a/odlparent/single-feature-parent/pom.xml
+++ b/odlparent/single-feature-parent/pom.xml
@@ -106,19 +106,19 @@
         <!-- Used by aaa, vtn -->
         <commons.codec.version>1.10</commons.codec.version>
         <!-- Used by netconf, ovsdb -->
-        <commons.lang3.version>3.4</commons.lang3.version>
+        <commons.lang3.version>3.6</commons.lang3.version>
         <!-- Used by sfc, snmp4sdn; see also affinity, toolkit -->
         <commons.lang.version>2.6</commons.lang.version>
         <!-- Used by neutron; see also controller, vtn -->
-        <commons.net.version>3.5</commons.net.version>
+        <commons.net.version>3.6</commons.net.version>
         <!-- Used by neutron -->
         <eclipse.persistence.version>2.6.2</eclipse.persistence.version>
         <!-- Used by aaa -->
         <felix.dependencymanager.version>4.3.0</felix.dependencymanager.version>
         <!-- Used by lacp, netconf, ovsdb, sfc, toolkit; see also vtn -->
-        <gson.version>2.3.1</gson.version>
+        <gson.version>2.7</gson.version>
         <!-- Used by aaa, dlux, persistence, snmp4sdn, sxp -->
-        <guava.version>18.0</guava.version>
+        <guava.version>22.0</guava.version>
         <!-- Used by lispflowmapping, sxp, vtn/manager -->
         <hamcrest.version>1.3</hamcrest.version>
         <!-- Used by aaa, alto, netconf, ovsdb, sfc; see also affinity, defense4all,
@@ -141,7 +141,7 @@
         <org.json.version>20131018</org.json.version>
 
         <!-- Used by sfc -->
-        <jettison.version>1.3.6</jettison.version>
+        <jettison.version>1.3.7</jettison.version>
         <!-- Used by persistence -->
         <jsr305.api.version>3.0.0</jsr305.api.version>
         <!-- Need to stick to JUnit 4.11 until https://github.com/jayway/powermock/issues/560
@@ -150,17 +150,17 @@
         <junit.version>4.11</junit.version>
         <!-- Used by coretutorials, sfc, snmp4sdn, sxp; see also affinity,
             toolkit -->
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.2.2</logback.version>
         <!-- Used by nic, sfc, sxp, tsdr -->
         <mockito.version>1.10.19</mockito.version>
         <!-- Used by bgpcep, netconf, ovsdb, sxp; see also opendove, toolkit -->
-        <netty.version>4.0.44.Final</netty.version>
+        <netty.version>4.1.8.Final</netty.version>
         <!-- Used by openflowjava, persistence, sfc, snmp4sdn, sxp; see also
             affinity, toolkit -->
         <slf4j.version>1.7.21</slf4j.version>
         <!-- Used in integration/distribution; see also affinity, snmp4sdn,
             toolkit, tsdr, ttp -->
-        <spring.version>3.2.14.RELEASE</spring.version>
+        <spring.version>3.2.17.RELEASE</spring.version>
 
 
 
@@ -168,8 +168,8 @@
         <equinox.osgi.version>3.8.1.v20120830-144521</equinox.osgi.version>
         <jackson-annotations-version>${jackson.version}</jackson-annotations-version>
         <jvnet.jaxb2.version>0.6.4</jvnet.jaxb2.version>
-        <apache.httpcomponents.core.version>4.3.2</apache.httpcomponents.core.version>
-        <apache.httpcomponents.client.version>4.3.3</apache.httpcomponents.client.version>
+        <apache.httpcomponents.core.version>4.4.4</apache.httpcomponents.core.version>
+        <apache.httpcomponents.client.version>4.5.2</apache.httpcomponents.client.version>
         <antlr.version>4.5.1</antlr.version>
         <mysql.connector.version>5.1.39</mysql.connector.version>
         <mariadb.connector.version>2.1.1</mariadb.connector.version>