diff --git a/aliyun-java-sdk-core/ChangeLog.txt b/aliyun-java-sdk-core/ChangeLog.txt
index 3a203a0351..0a41dc3b86 100644
--- a/aliyun-java-sdk-core/ChangeLog.txt
+++ b/aliyun-java-sdk-core/ChangeLog.txt
@@ -1,4 +1,10 @@
-2025-04-11 Version:4.7.4
+2025-05-09 Version:4.7.4-20250509-hotfix
+1.hotfix.
+
+2025-04-16 Version:4.7.4-20250416-hotfix
+1.hotfix.
+
+2025-04-11 Version:4.7.4
 1.Improve credentials providers in profile.
 
 2024-12-04 Version:4.7.3
diff --git a/aliyun-java-sdk-core/pom.xml b/aliyun-java-sdk-core/pom.xml
index 3ec2341deb..7ad2e53189 100644
--- a/aliyun-java-sdk-core/pom.xml
+++ b/aliyun-java-sdk-core/pom.xml
@@ -4,7 +4,7 @@
     <groupId>com.aliyun</groupId>
     <artifactId>aliyun-java-sdk-core</artifactId>
     <packaging>jar</packaging>
-    <version>4.7.4</version>
+    <version>4.7.4-20250509-hotfix</version>
     <name>aliyun-java-sdk-core</name>
     <url>https://www.aliyun.com</url>
     <description>Aliyun Open API SDK for Java
@@ -92,12 +92,12 @@
         <dependency>
             <groupId>org.glassfish.jaxb</groupId>
             <artifactId>jaxb-runtime</artifactId>
-            <version>4.0.5</version>
+            <version>2.3.2</version>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
-            <artifactId>bcprov-jdk18on</artifactId>
-            <version>1.78.1</version>
+            <artifactId>bcprov-jdk15on</artifactId>
+            <version>1.70</version>
         </dependency>
         <dependency>
             <groupId>org.mockito</groupId>