diff --git a/pom.xml b/pom.xml
index 6908f522..669ce285 100644
--- a/pom.xml
+++ b/pom.xml
@@ -87,7 +87,7 @@
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-classic</artifactId>
-                <version>1.6.5</version>
+                <version>1.6.6</version>
             </dependency>
             <dependency>
                 <groupId>javax.servlet</groupId>
@@ -233,7 +233,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>
-                <version>3.6.0</version>
+                <version>3.6.1</version>
                 <dependencies>
                     <!-- reactive-streams-tck brings TestNG, which makes surefire pick a provider that runs none of the JUnit 4 tests -->
                     <dependency>