diff --git a/pom.xml b/pom.xml
index f1aabaef4c..ad72f70e2b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1368,7 +1368,7 @@
             <dependency>
                 <groupId>commons-io</groupId>
                 <artifactId>commons-io</artifactId>
-                <version>2.1</version>
+                <version>2.4</version>
             </dependency>
 
             <dependency>
diff --git a/release-log.txt b/release-log.txt
index 6405bafcc5..a6b68bcaaf 100644
--- a/release-log.txt
+++ b/release-log.txt
@@ -1,5 +1,6 @@
 -- Oozie 4.3.1 release
 
+OOZIE-2888 Upgrade commons-io to 2.4 (dbist13 via pbacsko)
 OOZIE-3171 Revert OOZIE-2771 commit on branch-4.3 (satishsaley)
 OOZIE-2533 Oozie Web UI gives Error 500 with Java 8u91 (asasvari via satishsaley)
 OOZIE-3167 Upgrade tomcat version on Oozie 4.3 branch (satishsaley)