diff --git a/bin/impala-config.sh b/bin/impala-config.sh
index 7acc4d734..64c8d0c21 100755
--- a/bin/impala-config.sh
+++ b/bin/impala-config.sh
@@ -261,6 +261,7 @@ export APACHE_OZONE_VERSION=1.4.0
 # other branches to override them in impala-config-branch.sh for cleaner patches.
 export IMPALA_BOUNCY_CASTLE_VERSION=1.78
 export IMPALA_COMMONS_IO_VERSION=2.6
+export IMPALA_COMMONS_LANG3_VERSION=3.17.0
 export IMPALA_COS_VERSION=3.1.0-8.0.8
 export IMPALA_DERBY_VERSION=10.14.2.0
 export IMPALA_GUAVA_VERSION=32.0.1-jre
diff --git a/java/pom.xml b/java/pom.xml
index 5bb81be7e..23e477c6c 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -59,6 +59,7 @@ under the License.
     <kudu.version>${env.IMPALA_KUDU_VERSION}</kudu.version>
     <slf4j.version>${env.IMPALA_SLF4J_VERSION}</slf4j.version>
     <commons-io.version>${env.IMPALA_COMMONS_IO_VERSION}</commons-io.version>
+    <commons-lang3.version>${env.IMPALA_COMMONS_LANG3_VERSION}</commons-lang3.version>
     <reload4j.version>${env.IMPALA_RELOAD4j_VERSION}</reload4j.version>
     <junit.version>${env.IMPALA_JUNIT_VERSION}</junit.version>
     <!-- Beware compatibility requirements with Thrift and
@@ -264,6 +265,12 @@ under the License.
         <version>${avro.version}</version>
       </dependency>
 
+      <dependency>
+        <groupId>org.apache.commons</groupId>
+        <artifactId>commons-lang3</artifactId>
+        <version>${commons-lang3.version}</version>
+      </dependency>
+
       <!-- Override httpcore from libthrift to a later maintenance version. Noticed
           certain SPNEGO auth errors when connecting to kerberized HTTP endpoints
           using v4.4.1 pulled by libthrift. -->