diff --git a/build.gradle b/build.gradle
index 5c605dcab37..f320c2926ab 100644
--- a/build.gradle
+++ b/build.gradle
@@ -176,7 +176,7 @@ subprojects {
             // SECURITY.md (multiple occurrences)
             // examples/example-tls/build.gradle
             // examples/example-tls/pom.xml
-            netty_tcnative: 'io.netty:netty-tcnative-boringssl-static:2.0.34.Final',
+            netty_tcnative: 'io.netty:netty-tcnative-boringssl-static:2.0.36.Final',
 
             conscrypt: 'org.conscrypt:conscrypt-openjdk-uber:2.5.1',
             re2j: 'com.google.re2j:re2j:1.5',
diff --git a/examples/example-xds/build.gradle b/examples/example-xds/build.gradle
index 4449ec2ce2b..885daa2edb5 100644
--- a/examples/example-xds/build.gradle
+++ b/examples/example-xds/build.gradle
@@ -23,7 +23,6 @@ targetCompatibility = 1.7
 // Feel free to delete the comment at the next line. It is just for safely
 // updating the version in our release process.
 def grpcVersion = '1.37.0-SNAPSHOT' // CURRENT_GRPC_VERSION
-def nettyTcNativeVersion = '2.0.31.Final'
 def protocVersion = '3.12.0'
 
 dependencies {
diff --git a/repositories.bzl b/repositories.bzl
index 3ed5291a88b..cd07cd1f526 100644
--- a/repositories.bzl
+++ b/repositories.bzl
@@ -32,7 +32,7 @@ IO_GRPC_GRPC_JAVA_ARTIFACTS = [
     "io.netty:netty-handler-proxy:4.1.52.Final",
     "io.netty:netty-handler:4.1.52.Final",
     "io.netty:netty-resolver:4.1.52.Final",
-    "io.netty:netty-tcnative-boringssl-static:2.0.34.Final",
+    "io.netty:netty-tcnative-boringssl-static:2.0.36.Final",
     "io.netty:netty-transport-native-epoll:jar:linux-x86_64:4.1.52.Final",
     "io.netty:netty-transport:4.1.52.Final",
     "io.opencensus:opencensus-api:0.24.0",