diff --git a/Build/Src/Directory.Packages.props b/Build/Src/Directory.Packages.props
index efcc111784..f45369d24f 100644
--- a/Build/Src/Directory.Packages.props
+++ b/Build/Src/Directory.Packages.props
@@ -17,7 +17,7 @@
 
 	<!-- Use Update for root-pinned packages and Include for build-only packages absent from the root CPM file. -->
 	<ItemGroup Label="Build Tool Package Versions">
-		<PackageVersion Include="Microsoft.Build.Utilities.Core" Version="18.6.3" />
+		<PackageVersion Include="Microsoft.Build.Utilities.Core" Version="18.7.1" />
 		<PackageVersion Update="Microsoft.Extensions.DependencyModel" Version="2.1.0" />
 		<PackageVersion Update="NUnit3TestAdapter" Version="5.2.0" />
 		<PackageVersion Include="SIL.BuildTasks" Version="3.2.0" />
diff --git a/Directory.Packages.props b/Directory.Packages.props
index 0f8810af03..7c78392a54 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -29,22 +29,22 @@
 			 9.0.16 breaks ICU initialization in the .NET Framework test host. -->
 		<!-- System.Drawing.Common: SIL.LCModel.Core pulls 6.0.0 transitively,
 			 but ParatextData 9.5.x requires >= 9.0.9. Pin to 9.0.16. -->
-		<PackageVersion Include="System.Drawing.Common" Version="9.0.16" />
-		<PackageVersion Include="System.Reflection.Metadata" Version="10.0.8" />
+		<PackageVersion Include="System.Drawing.Common" Version="9.0.17" />
+		<PackageVersion Include="System.Reflection.Metadata" Version="10.0.9" />
 		<!-- System.Resources.Extensions: required for non-string resources (images, icons)
 			 in .NET Framework SDK-style projects. -->
-		<PackageVersion Include="System.Resources.Extensions" Version="9.0.16" />
+		<PackageVersion Include="System.Resources.Extensions" Version="9.0.17" />
 		<!-- DependencyModel: other current-line pins in this block move to 9.0.16,
 			 but this package stays at 9.0.14. icu.net wants 2.0.4, ParatextData wants
 			 >= 9.0.9, and 9.0.16 breaks ICU initialization in the .NET Framework test host. -->
-		<PackageVersion Include="Microsoft.Extensions.DependencyModel" Version="9.0.16" />
+		<PackageVersion Include="Microsoft.Extensions.DependencyModel" Version="9.0.17" />
 		<!-- System.Memory: ParatextData requires 4.6.3; other packages want 4.5.0–4.6.0. -->
 		<PackageVersion Include="System.Memory" Version="4.6.3" />
 		<!-- Microsoft.Bcl.HashCode: System.Resources.Extensions requires HashCode. -->
 		<PackageVersion Include="Microsoft.Bcl.HashCode" Version="6.0.0" />
 		<!-- System.Security.Permissions (LT-22394): ProDotNetZip needs >= 8.0.0,
 			 System.Security.AccessControl needs >= 6.0.0. Pin to 9.0.16. -->
-		<PackageVersion Include="System.Security.Permissions" Version="9.0.16" />
+		<PackageVersion Include="System.Security.Permissions" Version="9.0.17" />
 		<!-- System.Text.Encoding.CodePages: SIL.Machine requires 10.0.x,
 			 other chains resolve to 9.0.9. Pin to 10.0.3 to match the plugin project. -->
 		<PackageVersion Include="System.Text.Encoding.CodePages" Version="10.0.3" />