diff --git a/pom.xml b/pom.xml
index 21060ee69c041..5e8f58ee154c3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -298,7 +298,7 @@
io.netty
netty-all
- 4.0.13.Final
+ 4.0.17.Final
org.apache.derby
diff --git a/project/SparkBuild.scala b/project/SparkBuild.scala
index c402415742b5e..675ff7c571940 100644
--- a/project/SparkBuild.scala
+++ b/project/SparkBuild.scala
@@ -211,7 +211,7 @@ object SparkBuild extends Build {
*/
libraryDependencies ++= Seq(
- "io.netty" % "netty-all" % "4.0.13.Final",
+ "io.netty" % "netty-all" % "4.0.17.Final",
"org.eclipse.jetty" % "jetty-server" % "7.6.8.v20121106",
/** Workaround for SPARK-959. Dependency used by org.eclipse.jetty. Fixed in ivy 2.3.0. */
"org.eclipse.jetty.orbit" % "javax.servlet" % "2.5.0.v201103041518" artifacts Artifact("javax.servlet", "jar", "jar"),