diff --git a/SECURITY.md b/SECURITY.md
index 3e858ced3a..296aad2f54 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -372,7 +372,8 @@ grpc-netty version | netty-handler version | netty-tcnative-boringssl-static ver
 1.7.x-1.8.x        | 4.1.16.Final          | 2.0.6.Final
 1.9.x-1.10.x       | 4.1.17.Final          | 2.0.7.Final
 1.11.x-1.12.x      | 4.1.22.Final          | 2.0.7.Final
-1.13.x-            | 4.1.25.Final          | 2.0.8.Final
+1.13.x             | 4.1.25.Final          | 2.0.8.Final
+1.14.x-            | 4.1.27.Final          | 2.0.12.Final
 
 _(grpc-netty-shaded avoids issues with keeping these versions in sync.)_
 
diff --git a/build.gradle b/build.gradle
index 09eeabfc18..1bf3cd9291 100644
--- a/build.gradle
+++ b/build.gradle
@@ -109,7 +109,7 @@ subprojects {
         protocPluginBaseName = 'protoc-gen-grpc-java'
         javaPluginPath = "$rootDir/compiler/build/exe/java_plugin/$protocPluginBaseName$exeSuffix"
 
-        nettyVersion = '4.1.25.Final'
+        nettyVersion = '4.1.27.Final'
         guavaVersion = '20.0'
         protobufVersion = '3.5.1'
         protocVersion = '3.5.1-1'
@@ -221,7 +221,7 @@ subprojects {
             netty: "io.netty:netty-codec-http2:[${nettyVersion}]",
             netty_epoll: "io.netty:netty-transport-native-epoll:${nettyVersion}" + epoll_suffix,
             netty_proxy_handler: "io.netty:netty-handler-proxy:${nettyVersion}",
-            netty_tcnative: 'io.netty:netty-tcnative-boringssl-static:2.0.8.Final',
+            netty_tcnative: 'io.netty:netty-tcnative-boringssl-static:2.0.12.Final',
 
             conscrypt: 'org.conscrypt:conscrypt-openjdk-uber:1.0.1',
             re2j: 'com.google.re2j:re2j:1.2',