diff --git a/java/buildconf/ivy/ivy-suse.xml b/java/buildconf/ivy/ivy-suse.xml
index 96c371577895..e1fa3b2c7877 100644
--- a/java/buildconf/ivy/ivy-suse.xml
+++ b/java/buildconf/ivy/ivy-suse.xml
@@ -57,8 +57,8 @@
         <dependency org="suse" name="jdom" rev="1.1.3" />
         <dependency org="suse" name="joda-time" rev="2.10.1" />
         <dependency org="suse" name="jose4j" rev="0.9.6" />
-        <dependency org="suse" name="log4j-api" rev="2.17.2" />
-        <dependency org="suse" name="log4j-core" rev="2.17.2" />
+        <dependency org="suse" name="log4j-api" rev="2.25.3" />
+        <dependency org="suse" name="log4j-core" rev="2.25.3" />
         <dependency org="suse" name="jsch" rev="0.2.22" />
         <dependency org="suse" name="jctools-core" rev="4.0.5" />
         <dependency org="suse" name="mchange-commons-java" rev="0.2.20" />
@@ -71,8 +71,8 @@
         <dependency org="suse" name="netty-transport-native-unix-common" rev="4.1.130" />
         <dependency org="suse" name="oro" rev="2.0.8" />
         <dependency org="suse" name="pgjdbc-ng" rev="0.8.7" />
-        <dependency org="suse" name="postgresql" rev="42.2.25" />
-        <dependency org="suse" name="quartz" rev="2.3.0" />
+        <dependency org="suse" name="postgresql" rev="42.2.28" />
+        <dependency org="suse" name="quartz" rev="2.3.2" />
         <dependency org="suse" name="redstone-xmlrpc" rev="1.1_20071120" />
         <dependency org="suse" name="redstone-xmlrpc-client" rev="1.1_20071120" />
         <dependency org="suse" name="salt-netapi-client" rev="0.21.0" />
@@ -85,7 +85,7 @@
         <dependency org="suse" name="simple-xml" rev="2.7.1" />
         <dependency org="suse" name="sitemesh" rev="2.1" />
         <dependency org="suse" name="slf4j-api" rev="1.7.36" />
-        <dependency org="suse" name="log4j-slf4j-impl" rev="2.17.2" />
+        <dependency org="suse" name="log4j-slf4j-impl" rev="2.25.3" />
         <dependency org="suse" name="snakeyaml" rev="2.2" />
         <dependency org="suse" name="spark-core" rev="2.9.3" />
         <dependency org="suse" name="spark-template-jade" rev="2.7.1" />
@@ -100,7 +100,7 @@
         <dependency org="suse" name="xalan" rev="2.7.3" />
         <dependency org="suse" name="serializer" rev="2.7.3" />
         <dependency org="suse" name="xercesImpl" rev="2.12.2" />
-        <dependency org="suse" name="xmlsec" rev="2.0.7" />
+        <dependency org="suse" name="xmlsec" rev="2.2.6" />
         <dependency org="suse" name="jaxb-api" rev="2.4.0" />
         <dependency org="suse" name="javax.activation" rev="1.2.0" />
         <dependency org="suse" name="jaxb-runtime" rev="2.3.1" />
@@ -110,11 +110,11 @@
         <dependency org="suse" name="stax-ex" rev="1.8" />
 
         <!-- Tomcat jars -->
-        <dependency org="suse" name="tomcat-el-api" rev="[9.0.75,10.0.0[" />
-        <dependency org="suse" name="tomcat-jsp-api" rev="[9.0.75,10.0.0[" />
-        <dependency org="suse" name="tomcat-juli" rev="[9.0.75,10.0.0[" />
-        <dependency org="suse" name="tomcat-servlet-api" rev="[9.0.75,10.0.0[" />
-        <dependency org="suse" name="tomcat-websocket-api" rev="[9.0.75,10.0.0[" />
+        <dependency org="suse" name="tomcat-el-api" rev="[9.0.99,10.0.0[" />
+        <dependency org="suse" name="tomcat-jsp-api" rev="[9.0.99,10.0.0[" />
+        <dependency org="suse" name="tomcat-juli" rev="[9.0.99,10.0.0[" />
+        <dependency org="suse" name="tomcat-servlet-api" rev="[9.0.99,10.0.0[" />
+        <dependency org="suse" name="tomcat-websocket-api" rev="[9.0.99,10.0.0[" />
 
         <!-- Compilation and testing -->
         <dependency org="suse" name="velocity-engine-core" rev="2.4"/>
diff --git a/java/pom.xml b/java/pom.xml
index c899ffd27e68..ba89633645b5 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -544,7 +544,7 @@
             <dependency>
                 <groupId>org.quartz-scheduler</groupId>
                 <artifactId>quartz</artifactId>
-                <version>2.3.0</version>
+                <version>2.3.2</version>
                 <exclusions>
                     <!-- We do not use hikari for connection pooling -->
                     <exclusion>
@@ -702,7 +702,7 @@
             <dependency>
                 <groupId>org.apache.santuario</groupId>
                 <artifactId>xmlsec</artifactId>
-                <version>2.0.7</version>
+                <version>2.2.6</version>
             </dependency>
             <dependency>
                 <groupId>org.glassfish.jaxb</groupId>
@@ -754,12 +754,12 @@
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-slf4j-impl</artifactId>
-                <version>2.17.2</version>
+                <version>2.25.3</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-jcl</artifactId>
-                <version>2.17.2</version>
+                <version>2.25.3</version>
             </dependency>
             <dependency>
                 <groupId>com.mchange</groupId>
@@ -829,37 +829,37 @@
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-jasper</artifactId>
-                <version>9.0.91</version>
+                <version>9.0.99</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-jasper-el</artifactId>
-                <version>9.0.91</version>
+                <version>9.0.99</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-el-api</artifactId>
-                <version>9.0.91</version>
+                <version>9.0.99</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-jsp-api</artifactId>
-                <version>9.0.91</version>
+                <version>9.0.99</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-juli</artifactId>
-                <version>9.0.91</version>
+                <version>9.0.99</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-servlet-api</artifactId>
-                <version>9.0.91</version>
+                <version>9.0.99</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-websocket-api</artifactId>
-                <version>9.0.91</version>
+                <version>9.0.99</version>
             </dependency>
 
             <dependency>
diff --git a/microservices/uyuni-java-parent/pom.xml b/microservices/uyuni-java-parent/pom.xml
index bdf65740f2ec..57a217603a62 100644
--- a/microservices/uyuni-java-parent/pom.xml
+++ b/microservices/uyuni-java-parent/pom.xml
@@ -39,7 +39,7 @@
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-api</artifactId>
-                <version>2.17.2</version>
+                <version>2.25.3</version>
             </dependency>
             <dependency>
                 <groupId>org.mybatis</groupId>
@@ -49,12 +49,12 @@
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-core</artifactId>
-                <version>2.17.2</version>
+                <version>2.25.3</version>
             </dependency>
             <dependency>
                 <groupId>org.postgresql</groupId>
                 <artifactId>postgresql</artifactId>
-                <version>42.2.25</version>
+                <version>42.2.28</version>
                 <exclusions>
                     <!-- Not used at runtime -->
                     <exclusion>
diff --git a/search-server/spacewalk-search/ivy.xml b/search-server/spacewalk-search/ivy.xml
index e7e512aef982..d1625d55de6f 100644
--- a/search-server/spacewalk-search/ivy.xml
+++ b/search-server/spacewalk-search/ivy.xml
@@ -9,9 +9,9 @@
         <dependency org="suse" name="commons-logging" rev="1.2" />
         <dependency org="suse" name="redstone-xmlrpc" rev="1.1_20071120" />
         <dependency org="suse" name="mybatis" rev="3.5.19" />
-        <dependency org="suse" name="quartz" rev="2.3.0" />
-        <dependency org="suse" name="log4j-api" rev="2.17.2" />
-        <dependency org="suse" name="log4j-core" rev="2.17.2" />
+        <dependency org="suse" name="quartz" rev="2.3.2" />
+        <dependency org="suse" name="log4j-api" rev="2.25.3" />
+        <dependency org="suse" name="log4j-core" rev="2.25.3" />
         <dependency org="suse" name="c3p0" rev="0.9.5.5" />
         <dependency org="suse" name="mchange-commons-java" rev="0.2.20" />
         <dependency org="suse" name="picocontainer" rev="1.3" />