diff --git a/SECURITY.md b/SECURITY.md
index c72696123b4..8ef3f0fe844 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -326,7 +326,8 @@ grpc-netty version | netty-code-http2 version | netty-tcnative-boringssl-static
 1.4.x              | 4.1.11.Final             | 2.0.1.Final
 1.5.x              | 4.1.12.Final             | 2.0.5.Final
 1.6.x              | 4.1.14.Final             | 2.0.5.Final
-1.7.x-             | 4.1.16.Final             | 2.0.6.Final
+1.7.x-1.8.x        | 4.1.16.Final             | 2.0.6.Final
+1.9.x-             | 4.1.17.Final             | 2.0.7.Final
 
 ### OkHttp
 If you are using gRPC on Android devices, you are most likely using `grpc-okhttp` transport.
diff --git a/build.gradle b/build.gradle
index ab080e6bf2a..79875db1412 100644
--- a/build.gradle
+++ b/build.gradle
@@ -96,7 +96,7 @@ subprojects {
         protocPluginBaseName = 'protoc-gen-grpc-java'
         javaPluginPath = "$rootDir/compiler/build/exe/java_plugin/$protocPluginBaseName$exeSuffix"
 
-        nettyVersion = '4.1.16.Final'
+        nettyVersion = '4.1.17.Final'
         guavaVersion = '19.0'
         protobufVersion = '3.4.0'
         protocVersion = protobufVersion
@@ -205,7 +205,7 @@ subprojects {
                 netty: "io.netty:netty-codec-http2:[${nettyVersion}]",
                 netty_epoll: "io.netty:netty-transport-native-epoll:${nettyVersion}" + epoll_suffix,
                 netty_proxy_handler: "io.netty:netty-handler-proxy:${nettyVersion}",
-                netty_tcnative: 'io.netty:netty-tcnative-boringssl-static:2.0.6.Final',
+                netty_tcnative: 'io.netty:netty-tcnative-boringssl-static:2.0.7.Final',
 
                 // Test dependencies.
                 junit: 'junit:junit:4.12',