diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index d48e9eb375e..29d536dede8 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -72,7 +72,7 @@
     <commons-compress.version>1.27.1</commons-compress.version>
     <commons-csv.version>1.12.0</commons-csv.version>
     <commons-dbcp2.version>2.12.0</commons-dbcp2.version>
-    <commons-io.version>2.17.0</commons-io.version>
+    <commons-io.version>2.18.0</commons-io.version>
     <commons-lang3.version>3.17.0</commons-lang3.version>
     <commons-logging.version>1.3.4</commons-logging.version>
     <!-- `com.conversantmedia:disruptor` version 1.2.16 requires Java 9: -->
diff --git a/src/changelog/.2.x.x/update_commons_io_commons_io.xml b/src/changelog/.2.x.x/update_commons_io_commons_io.xml
index 59fa0a59337..31671ca8f6e 100644
--- a/src/changelog/.2.x.x/update_commons_io_commons_io.xml
+++ b/src/changelog/.2.x.x/update_commons_io_commons_io.xml
@@ -3,6 +3,6 @@
        xmlns="https://logging.apache.org/xml/ns"
        xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
        type="updated">
-  <issue id="2984" link="https://github.com/apache/logging-log4j2/pull/2984"/>
-  <description format="asciidoc">Update `commons-io:commons-io` to version `2.17.0`</description>
+  <issue id="3223" link="https://github.com/apache/logging-log4j2/pull/3223"/>
+  <description format="asciidoc">Update `commons-io:commons-io` to version `2.18.0`</description>
 </entry>