diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index b828bda89eb..bf115d758ed 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -96,7 +96,7 @@
     <assertj.version>3.25.3</assertj.version>
     <awaitility.version>4.2.1</awaitility.version>
     <bsh.version>2.0b6</bsh.version>
-    <commons-codec.version>1.16.1</commons-codec.version>
+    <commons-codec.version>1.17.0</commons-codec.version>
     <commons-compress.version>1.26.1</commons-compress.version>
     <commons-csv.version>1.10.0</commons-csv.version>
     <commons-dbcp2.version>2.12.0</commons-dbcp2.version>
@@ -156,7 +156,7 @@
     <tomcat-juli.version>10.1.23</tomcat-juli.version>
     <velocity.version>1.7</velocity.version>
     <wiremock.version>2.35.2</wiremock.version>
-    <xmlunit.version>2.9.1</xmlunit.version>
+    <xmlunit.version>2.10.0</xmlunit.version>
     <xz.version>1.9</xz.version>
     <zstd.version>1.5.6-3</zstd.version>
 
diff --git a/src/changelog/.3.x.x/update_commons_codec_commons_codec.xml b/src/changelog/.3.x.x/update_commons_codec_commons_codec.xml
new file mode 100644
index 00000000000..861d80f387d
--- /dev/null
+++ b/src/changelog/.3.x.x/update_commons_codec_commons_codec.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="2544" link="https://github.com/apache/logging-log4j2/pull/2544"/>
+  <description format="asciidoc">Update `commons-codec:commons-codec` to version `1.17.0`</description>
+</entry>
diff --git a/src/changelog/.3.x.x/update_org_xmlunit_xmlunit_core.xml b/src/changelog/.3.x.x/update_org_xmlunit_xmlunit_core.xml
new file mode 100644
index 00000000000..cfc7aa6565c
--- /dev/null
+++ b/src/changelog/.3.x.x/update_org_xmlunit_xmlunit_core.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="2545" link="https://github.com/apache/logging-log4j2/pull/2545"/>
+  <description format="asciidoc">Update `org.xmlunit:xmlunit-core` to version `2.10.0`</description>
+</entry>