diff --git a/hadoop-common-project/hadoop-common/CHANGES.txt b/hadoop-common-project/hadoop-common/CHANGES.txt
index 3157cb77dca..317d1f89d21 100644
--- a/hadoop-common-project/hadoop-common/CHANGES.txt
+++ b/hadoop-common-project/hadoop-common/CHANGES.txt
@@ -30,6 +30,8 @@ Release 2.0.3-alpha - Unreleased
 
     HADOOP-8783. Improve RPC.Server's digest auth (daryn)
 
+    HADOOP-8889. Upgrade to Surefire 2.12.3 (todd)
+
   OPTIMIZATIONS
 
     HADOOP-8866. SampleQuantiles#query is O(N^2) instead of O(N). (Andrew Wang
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 74480aad7ac..44df5d1fbb3 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -700,7 +700,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>2.12</version>
+          <version>2.12.3</version>
         </plugin>
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>