diff --git a/zipkin.yaml b/zipkin.yaml
index 5b7f19664dd..74b1848e31e 100644
--- a/zipkin.yaml
+++ b/zipkin.yaml
@@ -1,7 +1,7 @@
 package:
   name: zipkin
   version: "3.5.1"
-  epoch: 9 # GHSA-84h7-rjj3-6jx4
+  epoch: 10 # GHSA-vc5p-v9hr-52mj
   description: Zipkin distributed tracing system
   copyright:
     - license: Apache-2.0
diff --git a/zipkin/pombump-deps.yaml b/zipkin/pombump-deps.yaml
index 27ebfc50614..52047614bc6 100644
--- a/zipkin/pombump-deps.yaml
+++ b/zipkin/pombump-deps.yaml
@@ -14,3 +14,6 @@ patches:
   - groupId: org.apache.commons
     artifactId: commons-lang3
     version: 3.18.0
+  - groupId: org.apache.logging.log4j
+    artifactId: log4j-core
+    version: 2.25.3