From fa8656b628557693f6cd66800a5d84bebd80501c Mon Sep 17 00:00:00 2001
From: PJ Fanning <pjfanning@users.noreply.github.com>
Date: Fri, 19 Sep 2025 01:43:28 +0100
Subject: [PATCH] HADOOP-19690. bump commons-lang3 to 3.18.0 due to
 CVE-2025-48924 (#7970) Contributed by PJ Fanning.

* HADOOP-19690. bump commons-lang3 to 3.18.0 due to CVE-2025-48924

Signed-off-by: Shilun Fan <slfan1989@apache.org>
---
 LICENSE-binary         | 4 ++--
 hadoop-project/pom.xml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index 3ad4b30045d91..c8cd9a21cedb6 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -301,9 +301,9 @@ org.apache.commons:commons-compress:1.26.1
 org.apache.commons:commons-configuration2:2.10.1
 org.apache.commons:commons-csv:1.9.0
 org.apache.commons:commons-digester:1.8.1
-org.apache.commons:commons-lang3:3.17.0
+org.apache.commons:commons-lang3:3.18.0
 org.apache.commons:commons-math3:3.6.1
-org.apache.commons:commons-text:1.10.0
+org.apache.commons:commons-text:1.14.0
 org.apache.commons:commons-validator:1.6
 org.apache.curator:curator-client:5.2.0
 org.apache.curator:curator-framework:5.2.0
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index aa5342232900b..3963fd136ffff 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -124,11 +124,11 @@
     <commons-compress.version>1.26.1</commons-compress.version>
     <commons-csv.version>1.9.0</commons-csv.version>
     <commons-io.version>2.16.1</commons-io.version>
-    <commons-lang3.version>3.17.0</commons-lang3.version>
+    <commons-lang3.version>3.18.0</commons-lang3.version>
     <commons-logging.version>1.3.0</commons-logging.version>
     <commons-math3.version>3.6.1</commons-math3.version>
     <commons-net.version>3.9.0</commons-net.version>
-    <commons-text.version>1.10.0</commons-text.version>
+    <commons-text.version>1.14.0</commons-text.version>
 
     <kerby.version>2.0.3</kerby.version>
     <ehcache.version>3.8.2</ehcache.version>