diff --git a/bypy/sources.json b/bypy/sources.json
index 69d2e5577e..98cbc028d2 100644
--- a/bypy/sources.json
+++ b/bypy/sources.json
@@ -270,8 +270,8 @@
     {
         "name": "libxml2",
         "unix": {
-            "filename": "libxml2-2.9.10.tar.gz",
-            "hash": "sha256:aafee193ffb8fe0c82d4afef6ef91972cbaf5feea100edc2f262750611b4be1f",
+            "filename": "libxml2-2.9.12.tar.gz",
+            "hash": "sha256:c8d6681e38c56f172892c85ddc0852e1fd4b53b4209e7f4ebf17f7e2eae71d92",
             "urls": ["ftp://xmlsoft.org/libxml2/{filename}"]
         }
     },
@@ -553,8 +553,8 @@
     {
         "name": "lxml",
         "unix": {
-            "filename": "lxml-4.5.2.tar.gz",
-            "hash": "sha256:cdc13a1682b2a6241080745b1953719e7fe0850b40a5c71ca574f090a1391df6",
+            "filename": "lxml-4.6.3.tar.gz",
+            "hash": "sha256:39b78571b3b30645ac77b95f7c69d1bffc4cf8c3b157c435a34da72e78c82468",
             "urls": ["pypi"]
         }
     },