bump dependency versions

Change-Id: I79eb00c243775a0e6b6edd677ecd60b3fd22f2fa
diff --git a/lib/pom.xml b/lib/pom.xml
index 4a9d96e..cef4110 100644
--- a/lib/pom.xml
+++ b/lib/pom.xml
@@ -37,7 +37,7 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <onos-build-conf.version>1.12.0-SNAPSHOT</onos-build-conf.version>
-        <netty4.version>4.1.8.Final</netty4.version>
+        <netty4.version>4.1.16.Final</netty4.version>
         <openflowj.version>3.2.0.onos</openflowj.version>
         <onos-maven-plugin.version>1.10</onos-maven-plugin.version>
         <onos-yang-tools.version>2.3.0-b2</onos-yang-tools.version>
@@ -45,10 +45,10 @@
         <karaf.version>3.0.8</karaf.version>
         <jersey.version>2.25.1</jersey.version>
         <jetty.version>9.2.21.v20170120</jetty.version>
-        <jackson.version>2.8.8</jackson.version>
+        <jackson.version>2.8.10</jackson.version>
         <slf4j.version>1.7.21</slf4j.version>
         <guava.version>22.0</guava.version>
-        <commons.io.version>2.4</commons.io.version>
+        <commons.io.version>2.6</commons.io.version>
         <bouncycastle.version>1.58</bouncycastle.version>
         <!-- TODO argLine was originally added maven-surfire-plugin configuration
                   to fix locale errors for non-US developers. However, it breaks
@@ -121,7 +121,7 @@
             <dependency>
                 <groupId>com.googlecode.concurrent-trees</groupId>
                 <artifactId>concurrent-trees</artifactId>
-                <version>2.6.0</version>
+                <version>2.6.1</version>
             </dependency>
 
             <dependency>
@@ -151,7 +151,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>3.5</version>
+                <version>3.6</version>
             </dependency>
 
             <dependency>
@@ -350,7 +350,7 @@
             <dependency>
                 <groupId>com.esotericsoftware</groupId>
                 <artifactId>kryo</artifactId>
-                <version>4.0.0</version>
+                <version>4.0.1</version>
             </dependency>
             <dependency>
                 <groupId>com.esotericsoftware</groupId>
@@ -370,7 +370,7 @@
             <dependency>
                 <groupId>org.objenesis</groupId>
                 <artifactId>objenesis</artifactId>
-                <version>2.2</version>
+                <version>2.6</version>
             </dependency>
 
             <!-- Netty related; for now we require both 3.10.x and 4 -->
@@ -409,6 +409,12 @@
 
             <dependency>
                 <groupId>io.netty</groupId>
+                <artifactId>netty-transport-native-unix-common</artifactId>
+                <version>${netty4.version}</version>
+            </dependency>
+
+            <dependency>
+                <groupId>io.netty</groupId>
                 <artifactId>netty-transport-native-epoll</artifactId>
                 <version>${netty4.version}</version>
                 <classifier>${os.detected.classifier}</classifier>