diff --git a/pom.xml b/pom.xml
index 8409f5f0..58d22875 100644
--- a/pom.xml
+++ b/pom.xml
@@ -116,9 +116,11 @@
         <java_target_version>1.6</java_target_version>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<file_encoding>UTF-8</file_encoding>
-		<spring-version>5.2.7.RELEASE</spring-version>
+		<spring-version>3.1.2.RELEASE</spring-version>
 		<jetty_verion>8.1.7.v20120910</jetty_verion>
-		<otter_canal_version>1.1.4</otter_canal_version>
+		<logback_version>1.2.9</logback_version>
+		<slf4j_version>1.7.12</slf4j_version>
+		<otter_canal_version>1.1.5</otter_canal_version>
 	</properties>
 
 	<modules>
@@ -153,17 +155,17 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-compress</artifactId>
-                <version>1.9</version>
+                <version>1.21</version>
             </dependency>
 			<dependency>
 				<groupId>commons-io</groupId>
 				<artifactId>commons-io</artifactId>
-				<version>2.4</version>
+				<version>2.7</version>
 			</dependency>
 			<dependency>
 				<groupId>commons-beanutils</groupId>
 				<artifactId>commons-beanutils</artifactId>
-				<version>1.8.3</version>
+				<version>1.9.4</version>
 			</dependency>
 			<dependency>
 				<groupId>commons-collections</groupId>
@@ -199,7 +201,7 @@
 			<dependency>
 				<groupId>org.apache.zookeeper</groupId>
 				<artifactId>zookeeper</artifactId>
-				<version>3.4.5</version>
+				<version>3.4.14</version>
 				<exclusions>
 				  <exclusion>
 						<groupId>org.slf4j</groupId>
@@ -286,22 +288,22 @@
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-core</artifactId>
-                <version>1.2.9</version>
+                <version>${logback_version}</version>
             </dependency>
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-classic</artifactId>
-                <version>1.1.3</version>
+                <version>${logback_version}</version>
             </dependency>
             <dependency>
                 <groupId>org.slf4j</groupId>
                 <artifactId>jcl-over-slf4j</artifactId>
-                <version>1.7.12</version>
+                <version>${slf4j_version}</version>
             </dependency>
             <dependency>
                 <groupId>org.slf4j</groupId>
                 <artifactId>slf4j-api</artifactId>
-                <version>1.7.12</version>
+                <version>${slf4j_version}</version>
             </dependency>
             <dependency>
                 <groupId>javax.servlet</groupId>