diff --git a/druid.yaml b/druid.yaml
index c52309925a1..62254e1ed74 100644
--- a/druid.yaml
+++ b/druid.yaml
@@ -1,7 +1,7 @@
 package:
   name: druid
   version: "35.0.1"
-  epoch: 1 # GHSA-84h7-rjj3-6jx4
+  epoch: 2 # GHSA-vc5p-v9hr-52mj
   description: Apache Druid is a high performance real-time analytics database.
   copyright:
     - license: Apache-2.0
diff --git a/druid/pombump-properties.yaml b/druid/pombump-properties.yaml
index 31092cac71e..527d9b7de63 100644
--- a/druid/pombump-properties.yaml
+++ b/druid/pombump-properties.yaml
@@ -3,3 +3,5 @@ properties:
     value: "3.9.1"
   - property: netty4.version
     value: 4.1.118.Final
+  - property: log4j.version
+    value: "2.25.3"