diff --git a/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy b/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy
index 34fb141dbee9..54422e934519 100644
--- a/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy
+++ b/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy
@@ -33,7 +33,7 @@ class DependencyConstraints {
     // These version numbers are consumed by :geode-modules-assembly:distAppServer filtering
     // Some of these are referenced below as well
     deps.put("antlr.version", "2.7.7")
-    deps.put("commons-io.version", "2.11.0")
+    deps.put("commons-io.version", "2.15.1")
     deps.put("commons-lang3.version", "3.12.0")
     deps.put("commons-validator.version", "1.7")
     deps.put("fastutil.version", "8.5.8")
diff --git a/geode-log4j/src/main/java/org/apache/geode/logging/log4j/internal/impl/NullLogWriter.java b/geode-log4j/src/main/java/org/apache/geode/logging/log4j/internal/impl/NullLogWriter.java
index 6ccde9666899..13bc617bde5f 100644
--- a/geode-log4j/src/main/java/org/apache/geode/logging/log4j/internal/impl/NullLogWriter.java
+++ b/geode-log4j/src/main/java/org/apache/geode/logging/log4j/internal/impl/NullLogWriter.java
@@ -14,7 +14,7 @@
  */
 package org.apache.geode.logging.log4j.internal.impl;
 
-import static org.apache.commons.io.output.NullOutputStream.NULL_OUTPUT_STREAM;
+import static org.apache.commons.io.output.NullOutputStream.INSTANCE;
 
 import java.io.PrintStream;
 
@@ -27,7 +27,7 @@
 class NullLogWriter extends ManagerLogWriter {
 
   NullLogWriter() {
-    this(LogWriterLevel.NONE.intLevel(), new PrintStream(NULL_OUTPUT_STREAM), true);
+    this(LogWriterLevel.NONE.intLevel(), new PrintStream(INSTANCE), true);
   }
 
   NullLogWriter(final int level, final PrintStream printStream, final boolean loner) {