apache commons-lang 2.x releases are no longer compatible with Java 11 (due to usage of assert and enum as identifiers), and fedora packages are all getting ported to commons-lang3.

I did a quick search of the tomcatjss sources and found no usage of APIs that were removed with commons-lang3, so porting to the new version should be straightforward:

• change build.xml setup: "s/commons-lang/commons-lang3/"
• change import statements in Java files: "s/org\.apache\.commons\.lang\./org.apache.commons.lang3./" (I found only one usage, in src/org/apache/tomcat/util/net/jss/TomcatJSS.java)

There's also a Java SIG tracking issue for porting packages to commons-lang3.