diff --git a/licenses.yaml b/licenses.yaml
index a67d9aa5845..e4598fe5f2d 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -782,7 +782,7 @@ name: Netty
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 4.1.42.Final
+version: 4.1.45.Final
 libraries:
   - io.netty: netty-buffer
   - io.netty: netty-codec
diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index 22ab0ec0e4e..c456834baef 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -147,6 +147,8 @@
    ]]></notes>
     <packageUrl regex="true">^pkg:maven/io\.netty/netty@.*$</packageUrl>
     <cve>CVE-2019-16869</cve>
+    <cve>CVE-2019-20444</cve>
+    <cve>CVE-2019-20445</cve>
   </suppress>
   <suppress>
     <!-- TODO: Fix by upgrading hadoop-auth version -->
diff --git a/pom.xml b/pom.xml
index b7f46dd17ba..4395a6fcafd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -94,7 +94,7 @@
         <log4j.version>2.8.2</log4j.version>
         <netty3.version>3.10.6.Final</netty3.version>
         <!-- Spark updated in https://github.com/apache/spark/pull/19884 -->
-        <netty4.version>4.1.42.Final</netty4.version>
+        <netty4.version>4.1.45.Final</netty4.version>
         <node.version>v10.14.2</node.version>
         <npm.version>6.5.0</npm.version>
         <protobuf.version>3.11.0</protobuf.version>