diff --git a/celeborn-0.6.yaml b/celeborn-0.6.yaml
index e27c9a0dff2..9ba5f09e63f 100644
--- a/celeborn-0.6.yaml
+++ b/celeborn-0.6.yaml
@@ -1,7 +1,7 @@
 package:
   name: celeborn-0.6
   version: "0.6.1"
-  epoch: 0 # GHSA-jq43-27x9-3v86
+  epoch: 1 # GHSA-prj3-ccx8-p6x4
   description: "Apache Celeborn - A Remote Shuffle Service for Distributed Data Processing Engines"
   copyright:
     - license: Apache-2.0
diff --git a/celeborn-0.6/pombump-deps.yaml b/celeborn-0.6/pombump-deps.yaml
index 3b84653ee0a..01530d2c0a5 100644
--- a/celeborn-0.6/pombump-deps.yaml
+++ b/celeborn-0.6/pombump-deps.yaml
@@ -8,3 +8,6 @@ patches:
   - groupId: io.netty
     artifactId: netty-codec-smtp
     version: 4.1.128.Final
+  - groupId: io.netty
+    artifactId: netty-codec-http2
+    version: 4.1.124.Final