diff --git a/distribution/multi-bundle/distro.bndrun b/distribution/multi-bundle/distro.bndrun
index 923d8a3..e4baa88 100644
--- a/distribution/multi-bundle/distro.bndrun
+++ b/distribution/multi-bundle/distro.bndrun
@@ -54,7 +54,7 @@
 	org.apache.aries.rsa.discovery.zookeeper;version='[1.11.0,1.11.1)',\
 	org.apache.aries.rsa.spi;version='[1.11.0,1.11.1)',\
 	org.apache.aries.rsa.topology-manager;version='[1.11.0,1.11.1)',\
-	org.apache.commons.lang3;version='[3.6.0,3.6.1)',\
+	org.apache.commons.lang3;version='[3.7.0,3.7.1)',\
 	org.apache.felix.bundlerepository;version='[1.6.0,1.6.1)',\
 	org.apache.felix.configadmin;version='[1.8.8,1.8.9)',\
 	org.apache.felix.eventadmin;version='[1.4.6,1.4.7)',\
@@ -82,20 +82,20 @@
 	com.fasterxml.jackson.core.jackson-annotations;version='[2.9.0,2.9.1)',\
 	com.fasterxml.jackson.core.jackson-core;version='[2.9.1,2.9.2)',\
 	com.fasterxml.jackson.core.jackson-databind;version='[2.9.1,2.9.2)',\
-	org.apache.cxf.cxf-core;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-bindings-soap;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-bindings-xml;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-databinding-aegis;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-databinding-jaxb;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-frontend-jaxrs;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-frontend-jaxws;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-frontend-simple;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-rs-client;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-rs-service-description-swagger;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-transports-http;version='[3.2.1,3.2.2)',\
-	org.apache.cxf.cxf-rt-wsdl;version='[3.2.1,3.2.2)',\
+	org.apache.cxf.cxf-core;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-bindings-soap;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-bindings-xml;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-databinding-aegis;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-databinding-jaxb;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-frontend-jaxrs;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-frontend-jaxws;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-frontend-simple;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-rs-client;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-rs-service-description-swagger;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-transports-http;version='[3.2.2,3.2.3)',\
+	org.apache.cxf.cxf-rt-wsdl;version='[3.2.2,3.2.3)',\
 	org.apache.cxf.dosgi.cxf-dosgi-common;version='[2.4.0,2.4.1)',\
 	org.apache.cxf.dosgi.cxf-dosgi-provider-rs;version='[2.4.0,2.4.1)',\
 	org.apache.cxf.dosgi.cxf-dosgi-provider-ws;version='[2.4.0,2.4.1)',\
 	org.apache.cxf.dosgi.samples.cxf-dosgi-samples-rest-api;version='[2.4.0,2.4.1)',\
-	org.apache.cxf.dosgi.samples.cxf-dosgi-samples-rest-impl;version='[2.4.0,2.4.1)'
\ No newline at end of file
+	org.apache.cxf.dosgi.samples.cxf-dosgi-samples-rest-impl;version='[2.4.0,2.4.1)'
diff --git a/distribution/multi-bundle/pom.xml b/distribution/multi-bundle/pom.xml
index 71eb49f..98d8103 100644
--- a/distribution/multi-bundle/pom.xml
+++ b/distribution/multi-bundle/pom.xml
@@ -202,7 +202,7 @@
 		<dependency>
 			<groupId>org.apache.commons</groupId>
 			<artifactId>commons-lang3</artifactId>
-			<version>3.6</version>
+			<version>3.7</version>
 		</dependency>
 		<dependency>
 			<groupId>com.fasterxml.jackson.core</groupId>
diff --git a/parent/pom.xml b/parent/pom.xml
index 15d12e0..2169e45 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -30,7 +30,7 @@
         <osgi.version>6.0.0</osgi.version>
         <osgi.compendium.version>5.0.0</osgi.compendium.version>
         <aries.rsa.version>1.11.0</aries.rsa.version>
-        <cxf.version>3.2.0</cxf.version>
+        <cxf.version>3.2.2</cxf.version>
         <felix.version>5.6.8</felix.version>
         <zookeeper.version>3.4.8</zookeeper.version>
         <servlet.version>3.0</servlet.version>