diff --git a/src/Symfony/Bundle/SecurityBundle/composer.json b/src/Symfony/Bundle/SecurityBundle/composer.json
index 69091f5269..e765b16bef 100644
--- a/src/Symfony/Bundle/SecurityBundle/composer.json
+++ b/src/Symfony/Bundle/SecurityBundle/composer.json
@@ -18,7 +18,7 @@
     "require": {
         "php": ">=5.3.9",
         "ext-xml": "*",
-        "symfony/security": "~2.7",
+        "symfony/security": "~2.7.38|~2.8.31",
         "symfony/security-acl": "~2.7",
         "symfony/http-kernel": "~2.7"
     },
@@ -26,7 +26,7 @@
         "symfony/browser-kit": "~2.7",
         "symfony/console": "~2.7",
         "symfony/css-selector": "^2.7",
-        "symfony/dependency-injection": "^2.7",
+        "symfony/dependency-injection": "^2.7.1",
         "symfony/dom-crawler": "^2.7",
         "symfony/form": "~2.7.15|^2.8.8",
         "symfony/framework-bundle": "~2.7.25|^2.8.18",
diff --git a/src/Symfony/Component/Security/Csrf/composer.json b/src/Symfony/Component/Security/Csrf/composer.json
index 2930e325f3..4f6ee250c0 100644
--- a/src/Symfony/Component/Security/Csrf/composer.json
+++ b/src/Symfony/Component/Security/Csrf/composer.json
@@ -20,7 +20,10 @@
         "symfony/security-core": "~2.4"
     },
     "require-dev": {
-        "symfony/http-foundation": "~2.1"
+        "symfony/http-foundation": "~2.7"
+    },
+    "conflict": {
+        "symfony/http-foundation": "<2.7.38|~2.8,<2.8.31"
     },
     "suggest": {
         "symfony/http-foundation": "For using the class SessionTokenStorage."
diff --git a/src/Symfony/Component/Security/composer.json b/src/Symfony/Component/Security/composer.json
index 5c11861c62..85e27fed23 100644
--- a/src/Symfony/Component/Security/composer.json
+++ b/src/Symfony/Component/Security/composer.json
@@ -19,7 +19,7 @@
         "php": ">=5.3.9",
         "paragonie/random_compat": "~1.0",
         "symfony/event-dispatcher": "~2.2",
-        "symfony/http-foundation": "~2.1",
+        "symfony/http-foundation": "~2.7",
         "symfony/http-kernel": "~2.4"
     },
     "replace": {
@@ -39,6 +39,9 @@
         "ircmaxell/password-compat": "~1.0",
         "symfony/expression-language": "~2.6"
     },
+    "conflict": {
+        "symfony/http-foundation": "<2.7.38|~2.8,<2.8.31"
+    },
     "suggest": {
         "symfony/class-loader": "For using the ACL generateSql script",
         "symfony/finder": "For using the ACL generateSql script",