From d36ea226e885b6693a05c9a54044ac83fcb2afb8 Mon Sep 17 00:00:00 2001
From: Renukaprasad C <48682981+prasad-acit@users.noreply.github.com>
Date: Tue, 26 Oct 2021 06:46:50 +0530
Subject: [PATCH 1/3] HADOOP-17946. Upgrade commons-lang to 3.12.0 (#3575)

---
 hadoop-project/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 228c2a490c188..f9414ecbfb4c9 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -118,7 +118,7 @@
     <commons-compress.version>1.21</commons-compress.version>
     <commons-csv.version>1.0</commons-csv.version>
     <commons-io.version>2.8.0</commons-io.version>
-    <commons-lang3.version>3.7</commons-lang3.version>
+    <commons-lang3.version>3.12.0</commons-lang3.version>
     <commons-logging.version>1.1.3</commons-logging.version>
     <commons-logging-api.version>1.1</commons-logging-api.version>
     <commons-math3.version>3.1.1</commons-math3.version>

From fbeae8f45aafaefa8d45a0044be0cf88d1a5011d Mon Sep 17 00:00:00 2001
From: Istvan Toth <stoty@apache.org>
Date: Sat, 26 Apr 2025 06:04:33 -0400
Subject: [PATCH 2/3] HADOOP-19532. Update commons-lang3 to 3.17.0 (#7591)
 (#7648) Contributed by Istvan Toth.

Signed-off-by: Shilun Fan <slfan1989@apache.org>
---
 LICENSE-binary         | 2 +-
 hadoop-project/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index df5d9c8fba425..2abb735153a31 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -308,7 +308,7 @@ org.apache.commons:commons-compress:1.21
 org.apache.commons:commons-configuration2:2.1.1
 org.apache.commons:commons-csv:1.0
 org.apache.commons:commons-digester:1.8.1
-org.apache.commons:commons-lang3:3.12.0
+org.apache.commons:commons-lang3:3.17.0
 org.apache.commons:commons-math3:3.1.1
 org.apache.commons:commons-text:1.4
 org.apache.commons:commons-validator:1.6
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index f9414ecbfb4c9..15236e455096f 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -118,7 +118,7 @@
     <commons-compress.version>1.21</commons-compress.version>
     <commons-csv.version>1.0</commons-csv.version>
     <commons-io.version>2.8.0</commons-io.version>
-    <commons-lang3.version>3.12.0</commons-lang3.version>
+    <commons-lang3.version>3.17.0</commons-lang3.version>
     <commons-logging.version>1.1.3</commons-logging.version>
     <commons-logging-api.version>1.1</commons-logging-api.version>
     <commons-math3.version>3.1.1</commons-math3.version>

From 892c4ddb5409ab86d34a12a89d8ef274d6c5c202 Mon Sep 17 00:00:00 2001
From: PJ Fanning <pjfanning@users.noreply.github.com>
Date: Tue, 2 Apr 2024 15:50:00 -0400
Subject: [PATCH 3/3] HADOOP-19123. Update to commons-configuration2 2.10.1 due
 to CVE (#6661). Contributed by PJ Fanning

Reviewed-by: Shilun Fan <slfan1989@apache.org>
Signed-off-by: Ayush Saxena <ayushsaxena@apache.org>
---
 LICENSE-binary         | 2 +-
 hadoop-project/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index 2abb735153a31..476951d6e6a36 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -305,7 +305,7 @@ net.minidev:json-smart:2.6.0
 org.apache.avro:avro:1.11.4
 org.apache.commons:commons-collections4:4.2
 org.apache.commons:commons-compress:1.21
-org.apache.commons:commons-configuration2:2.1.1
+org.apache.commons:commons-configuration2:2.10.1
 org.apache.commons:commons-csv:1.0
 org.apache.commons:commons-digester:1.8.1
 org.apache.commons:commons-lang3:3.17.0
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 15236e455096f..5479dad875492 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -1117,7 +1117,7 @@
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-configuration2</artifactId>
-        <version>2.1.1</version>
+        <version>2.10.1</version>
         <exclusions>
           <exclusion>
             <groupId>org.apache.commons</groupId>