diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 5fd845ccb2f..cef45079d9d 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -97,7 +97,7 @@
     <awaitility.version>4.3.0</awaitility.version>
     <bsh.version>2.0b6</bsh.version>
     <bnd.annotation.version>7.1.0</bnd.annotation.version>
-    <commons-codec.version>1.18.0</commons-codec.version>
+    <commons-codec.version>1.19.0</commons-codec.version>
     <commons-csv.version>1.14.0</commons-csv.version>
     <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
     <commons-io.version>2.19.0</commons-io.version>
diff --git a/src/changelog/.3.x.x/update_commons_codec_commons_codec.xml b/src/changelog/.3.x.x/update_commons_codec_commons_codec.xml
index ca810264c43..013f69f55be 100644
--- a/src/changelog/.3.x.x/update_commons_codec_commons_codec.xml
+++ b/src/changelog/.3.x.x/update_commons_codec_commons_codec.xml
@@ -3,6 +3,6 @@
        xmlns="https://logging.apache.org/xml/ns"
        xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
        type="updated">
-  <issue id="3419" link="https://github.com/apache/logging-log4j2/pull/3419"/>
-  <description format="asciidoc">Update `commons-codec:commons-codec` to version `1.18.0`</description>
+  <issue id="3909" link="https://github.com/apache/logging-log4j2/pull/3909"/>
+  <description format="asciidoc">Update `commons-codec:commons-codec` to version `1.19.0`</description>
 </entry>