diff --git a/requirements.txt b/requirements.txt
index aefd60558a19..8837f7caf125 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -8,7 +8,7 @@ decorator>=3.4.0 # BSD
 eventlet!=0.18.3,>=0.18.2 # MIT
 Jinja2>=2.8 # BSD License (3 clause)
 keystonemiddleware>=4.12.0 # Apache-2.0
-lxml>=2.3 # BSD
+lxml!=3.7.0,>=2.3 # BSD
 Routes!=2.0,!=2.1,!=2.3.0,>=1.12.3;python_version=='2.7' # MIT
 Routes!=2.0,!=2.3.0,>=1.12.3;python_version!='2.7' # MIT
 cryptography!=1.3.0,>=1.0 # BSD/Apache-2.0
@@ -22,7 +22,7 @@ netaddr!=0.7.16,>=0.7.13 # BSD
 netifaces>=0.10.4 # MIT
 paramiko>=2.0 # LGPLv2.1+
 Babel>=2.3.4 # BSD
-enum34;python_version=='2.7' or python_version=='2.6' or python_version=='3.3'  # BSD
+enum34;python_version=='2.7' or python_version=='2.6' or python_version=='3.3' # BSD
 iso8601>=0.1.11 # MIT
 jsonschema!=2.5.0,<3.0.0,>=2.0.0 # MIT
 python-cinderclient!=1.7.0,!=1.7.1,>=1.6.0 # Apache-2.0
@@ -42,7 +42,7 @@ oslo.log>=3.11.0 # Apache-2.0
 oslo.reports>=0.6.0 # Apache-2.0
 oslo.serialization>=1.10.0 # Apache-2.0
 oslo.utils>=3.18.0 # Apache-2.0
-oslo.db!=4.13.1,!=4.13.2,>=4.11.0 # Apache-2.0
+oslo.db>=4.13.3 # Apache-2.0
 oslo.rootwrap>=5.0.0 # Apache-2.0
 oslo.messaging>=5.14.0 # Apache-2.0
 oslo.policy>=1.17.0 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index f8bf62d34092..ca702ee7e34c 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -9,7 +9,7 @@ fixtures>=3.0.0 # Apache-2.0/BSD
 mock>=2.0 # BSD
 mox3>=0.7.0 # Apache-2.0
 psycopg2>=2.5 # LGPL/ZPL
-PyMySQL!=0.7.7,>=0.7.6 # MIT License
+PyMySQL>=0.7.6 # MIT License
 python-barbicanclient>=4.0.0 # Apache-2.0
 python-ironicclient>=1.6.0 # Apache-2.0
 python-subunit>=0.0.18 # Apache-2.0/BSD