You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@bookkeeper.apache.org by yo...@apache.org on 2021/10/26 01:18:11 UTC

[bookkeeper] 08/11: [security] Upgrade Netty to 4.1.68.Final (#2811)

This is an automated email from the ASF dual-hosted git repository.

yong pushed a commit to branch branch-4.14
in repository https://gitbox.apache.org/repos/asf/bookkeeper.git

commit dae5171a776caff617eea4f929e76765897c3eec
Author: Nicolò Boschi <bo...@gmail.com>
AuthorDate: Mon Oct 4 23:58:00 2021 +0200

    [security] Upgrade Netty to 4.1.68.Final (#2811)
    
    (cherry picked from commit 510439d1c703270ca7b7166a435476ce9ce39eb2)
---
 bookkeeper-dist/all/build.gradle                   |   2 +-
 bookkeeper-dist/bkctl/build.gradle                 |   2 +-
 bookkeeper-dist/server/build.gradle                |   2 +-
 bookkeeper-dist/src/assemble/bin-all.xml           |   2 +-
 bookkeeper-dist/src/assemble/bin-server.xml        |   2 +-
 bookkeeper-dist/src/assemble/bkctl.xml             |   2 +-
 .../src/main/resources/LICENSE-all.bin.txt         | 144 ++++++++++-----------
 .../src/main/resources/LICENSE-bkctl.bin.txt       | 140 ++++++++++----------
 .../src/main/resources/LICENSE-server.bin.txt      | 144 ++++++++++-----------
 .../src/main/resources/NOTICE-all.bin.txt          |  30 ++---
 .../src/main/resources/NOTICE-bkctl.bin.txt        |  26 ++--
 .../src/main/resources/NOTICE-server.bin.txt       |  30 ++---
 .../LICENSE.aalto-xml.txt                          |   0
 .../LICENSE.base64.txt                             |   0
 .../LICENSE.bouncycastle.txt                       |   0
 .../LICENSE.caliper.txt                            |   0
 .../LICENSE.commons-lang.txt                       |   0
 .../LICENSE.commons-logging.txt                    |   0
 .../LICENSE.compress-lzf.txt                       |   0
 .../LICENSE.dnsinfo.txt                            |   0
 .../LICENSE.harmony.txt                            |   0
 .../LICENSE.hpack.txt                              |   0
 .../LICENSE.hyper-hpack.txt                        |   0
 .../LICENSE.jboss-marshalling.txt                  |   0
 .../LICENSE.jbzip2.txt                             |   0
 .../LICENSE.jctools.txt                            |   0
 .../LICENSE.jfastlz.txt                            |   0
 .../LICENSE.jsr166y.txt                            |   0
 .../LICENSE.jzlib.txt                              |   0
 .../LICENSE.libdivsufsort.txt                      |   0
 .../LICENSE.log4j.txt                              |   0
 .../LICENSE.lz4.txt                                |   0
 .../LICENSE.lzma-java.txt                          |   0
 .../LICENSE.mvn-wrapper.txt                        |   0
 .../LICENSE.nghttp2-hpack.txt                      |   0
 .../LICENSE.protobuf.txt                           |   0
 .../LICENSE.slf4j.txt                              |   0
 .../LICENSE.snappy.txt                             |   0
 .../LICENSE.webbit.txt                             |   0
 .../NOTICE.harmony.txt                             |   0
 dependencies.gradle                                |   4 +-
 pom.xml                                            |   4 +-
 42 files changed, 267 insertions(+), 267 deletions(-)

diff --git a/bookkeeper-dist/all/build.gradle b/bookkeeper-dist/all/build.gradle
index 54f44d3..2ad3719 100644
--- a/bookkeeper-dist/all/build.gradle
+++ b/bookkeeper-dist/all/build.gradle
@@ -64,7 +64,7 @@ def depLicences = [
         "javax.servlet-api-4.0.0/CDDL+GPL-1.1",
         "bouncycastle-1.0.2/LICENSE.html",
         "jsr-305/LICENSE",
-        "netty-4.1.63.Final/*",
+        "netty-4.1.68.Final/*",
         "paranamer-2.8/LICENSE.txt",
         "protobuf-3.14.0/LICENSE",
         "protobuf-3.12.0/LICENSE",
diff --git a/bookkeeper-dist/bkctl/build.gradle b/bookkeeper-dist/bkctl/build.gradle
index d31e3de..691f09b 100644
--- a/bookkeeper-dist/bkctl/build.gradle
+++ b/bookkeeper-dist/bkctl/build.gradle
@@ -36,7 +36,7 @@ def depLicences = [
         "checker-qual-3.5.0/LICENSE",
         "google-auth-library-credentials-0.20.0/LICENSE",
         "javax.servlet-api-4.0.0/CDDL+GPL-1.1",
-        "netty-4.1.63.Final/*",
+        "netty-4.1.68.Final/*",
         "bouncycastle-1.0.2/LICENSE.html",
         "protobuf-3.14.0/LICENSE",
         "protobuf-3.12.0/LICENSE",
diff --git a/bookkeeper-dist/server/build.gradle b/bookkeeper-dist/server/build.gradle
index ccdbb7f..a3264f7 100644
--- a/bookkeeper-dist/server/build.gradle
+++ b/bookkeeper-dist/server/build.gradle
@@ -60,7 +60,7 @@ def depLicences = [
         "checker-qual-3.5.0/LICENSE",
         "google-auth-library-credentials-0.20.0/LICENSE",
         "javax.servlet-api-4.0.0/CDDL+GPL-1.1",
-        "netty-4.1.63.Final/*",
+        "netty-4.1.68.Final/*",
         "bouncycastle-1.0.2/LICENSE.html",
         "protobuf-3.14.0/LICENSE",
         "protobuf-3.12.0/LICENSE",
diff --git a/bookkeeper-dist/src/assemble/bin-all.xml b/bookkeeper-dist/src/assemble/bin-all.xml
index 24a242f..9a72935 100644
--- a/bookkeeper-dist/src/assemble/bin-all.xml
+++ b/bookkeeper-dist/src/assemble/bin-all.xml
@@ -59,7 +59,7 @@
         <include>javax.servlet-api-4.0.0/CDDL+GPL-1.1</include>
         <include>bouncycastle-1.0.2/LICENSE.html</include>
         <include>jsr-305/LICENSE</include>
-        <include>netty-4.1.63.Final/*</include>
+        <include>netty-4.1.68.Final/*</include>
         <include>paranamer-2.8/LICENSE.txt</include>
         <include>protobuf-3.14.0/LICENSE</include>
         <include>protobuf-3.12.0/LICENSE</include>
diff --git a/bookkeeper-dist/src/assemble/bin-server.xml b/bookkeeper-dist/src/assemble/bin-server.xml
index 7157f39..fa73418 100644
--- a/bookkeeper-dist/src/assemble/bin-server.xml
+++ b/bookkeeper-dist/src/assemble/bin-server.xml
@@ -52,7 +52,7 @@
         <include>checker-qual-3.5.0/LICENSE</include>
         <include>google-auth-library-credentials-0.20.0/LICENSE</include>
         <include>javax.servlet-api-4.0.0/CDDL+GPL-1.1</include>
-        <include>netty-4.1.63.Final/*</include>
+        <include>netty-4.1.68.Final/*</include>
         <include>bouncycastle-1.0.2/LICENSE.html</include>
         <include>protobuf-3.14.0/LICENSE</include>
         <include>protobuf-3.12.0/LICENSE</include>
diff --git a/bookkeeper-dist/src/assemble/bkctl.xml b/bookkeeper-dist/src/assemble/bkctl.xml
index 73fffc5..e9cea87 100644
--- a/bookkeeper-dist/src/assemble/bkctl.xml
+++ b/bookkeeper-dist/src/assemble/bkctl.xml
@@ -66,7 +66,7 @@
       <includes>
         <include>checker-qual-3.5.0/LICENSE</include>
         <include>google-auth-library-credentials-0.20.0/LICENSE</include>
-        <include>netty-4.1.63.Final/*</include>
+        <include>netty-4.1.68.Final/*</include>
         <include>bouncycastle-1.0.2/LICENSE.html</include>
         <include>protobuf-3.14.0/LICENSE</include>
         <include>protobuf-3.12.0/LICENSE</include>
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
index 104bd44..65087f4 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -217,21 +217,21 @@ Apache Software License, Version 2.
 - lib/commons-io-commons-io-2.7.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-dns-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.63.Final.jar [11]
-- lib/io.netty-netty-common-4.1.63.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.63.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.63.Final.jar [11]
-- lib/io.netty-netty-resolver-dns-4.1.63.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.63.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-dns-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.68.Final.jar [11]
+- lib/io.netty-netty-common-4.1.68.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.68.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.68.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.68.Final.jar [11]
+- lib/io.netty-netty-resolver-dns-4.1.68.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.42.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.68.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.68.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.68.Final.jar [11]
 - lib/io.prometheus-simpleclient-0.8.1.jar [12]
 - lib/io.prometheus-simpleclient_common-0.8.1.jar [12]
 - lib/io.prometheus-simpleclient_hotspot-0.8.1.jar [12]
@@ -312,7 +312,7 @@ Apache Software License, Version 2.
 [8] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-io.git;a=tag;h=603579
 [9] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-lang.git;a=tag;h=375459
 [10] Source available at http://svn.apache.org/viewvc/commons/proper/logging/tags/commons-logging-1.1.1/
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.63.Final
+[11] Source available at https://github.com/netty/netty/tree/netty-4.1.68.Final
 [12] Source available at https://github.com/prometheus/client_java/tree/parent-0.8.1
 [13] Source available at https://github.com/vert-x3/vertx-auth/tree/3.9.8
 [14] Source available at https://github.com/vert-x3/vertx-bridge-common/tree/3.9.8
@@ -351,229 +351,229 @@ Apache Software License, Version 2.
 [50] Source available at https://github.com/google/snappy/releases/tag/1.1.7
 
 ------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.63.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.68.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the extensions to Java Collections Framework which has
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the extensions to Java Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jsr166y.txt (Public Domain)
+    * deps/netty-4.1.68.Final/LICENSE.jsr166y.txt (Public Domain)
   * HOMEPAGE:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.base64.txt (Public Domain)
+    * deps/netty-4.1.68.Final/LICENSE.base64.txt (Public Domain)
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Webbit', an event based
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.webbit.txt (BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.webbit.txt (BSD License)
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.slf4j.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.slf4j.txt (MIT License)
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
-    * deps/netty-4.1.63.Final/NOTICE.harmony.txt
+    * deps/netty-4.1.68.Final/NOTICE.harmony.txt
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.harmony.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.harmony.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jbzip2.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.jbzip2.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.libdivsufsort.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jctools.txt (ASL2 License)
+    * deps/netty-4.1.68.Final/LICENSE.jctools.txt (ASL2 License)
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jzlib.txt (BSD style License)
+    * deps/netty-4.1.68.Final/LICENSE.jzlib.txt (BSD style License)
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lz4', a LZ4 Java compression
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'lz4', a LZ4 Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.lz4.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.lz4.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.lzma-java.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.lzma-java.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jfastlz.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.jfastlz.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.protobuf.txt (New BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.protobuf.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.bouncycastle.txt (MIT License)
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Snappy', a compression library produced
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Snappy', a compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.snappy.txt (New BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.snappy.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Caliper', Google's micro-
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Caliper', Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.caliper.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.caliper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Apache Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.commons-logging.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.commons-logging.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.log4j.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.log4j.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.hpack.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.hpack.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.hyper-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.nghttp2-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.commons-lang.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.commons-lang.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the Maven build.
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
 
  * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://www.opensource.apple.com/source/configd/configd-453.19/dnsinfo/dnsinfo.h
 
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
index 7189cc0..b02283b 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
@@ -217,19 +217,19 @@ Apache Software License, Version 2.
 - lib/commons-io-commons-io-2.7.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.63.Final.jar [11]
-- lib/io.netty-netty-common-4.1.63.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.63.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.63.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.63.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.68.Final.jar [11]
+- lib/io.netty-netty-common-4.1.68.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.68.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.68.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.68.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.42.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.68.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.68.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.68.Final.jar [11]
 - lib/log4j-log4j-1.2.17.jar [16]
 - lib/net.java.dev.jna-jna-3.2.7.jar [17]
 - lib/org.apache.commons-commons-collections4-4.1.jar [18]
@@ -289,7 +289,7 @@ Apache Software License, Version 2.
 [8] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-io.git;a=tag;h=603579
 [9] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-lang.git;a=tag;h=375459
 [10] Source available at http://svn.apache.org/viewvc/commons/proper/logging/tags/commons-logging-1.1.1/
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.63.Final
+[11] Source available at https://github.com/netty/netty/tree/netty-4.1.68.Final
 [16] Source available at http://logging.apache.org/log4j/1.2/download.html
 [17] Source available at https://github.com/java-native-access/jna/tree/3.2.7
 [18] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-collections.git;a=tag;h=a3a5ad
@@ -320,229 +320,229 @@ Apache Software License, Version 2.
 [50] Source available at https://github.com/google/snappy/releases/tag/1.1.7
 
 ------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.63.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.68.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the extensions to Java Collections Framework which has
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the extensions to Java Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jsr166y.txt (Public Domain)
+    * deps/netty-4.1.68.Final/LICENSE.jsr166y.txt (Public Domain)
   * HOMEPAGE:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.base64.txt (Public Domain)
+    * deps/netty-4.1.68.Final/LICENSE.base64.txt (Public Domain)
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Webbit', an event based
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.webbit.txt (BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.webbit.txt (BSD License)
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.slf4j.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.slf4j.txt (MIT License)
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
-    * deps/netty-4.1.63.Final/NOTICE.harmony.txt
+    * deps/netty-4.1.68.Final/NOTICE.harmony.txt
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.harmony.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.harmony.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jbzip2.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.jbzip2.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.libdivsufsort.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jctools.txt (ASL2 License)
+    * deps/netty-4.1.68.Final/LICENSE.jctools.txt (ASL2 License)
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jzlib.txt (BSD style License)
+    * deps/netty-4.1.68.Final/LICENSE.jzlib.txt (BSD style License)
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lz4', a LZ4 Java compression
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'lz4', a LZ4 Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.lz4.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.lz4.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.lzma-java.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.lzma-java.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jfastlz.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.jfastlz.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.protobuf.txt (New BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.protobuf.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.bouncycastle.txt (MIT License)
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Snappy', a compression library produced
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Snappy', a compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.snappy.txt (New BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.snappy.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Caliper', Google's micro-
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Caliper', Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.caliper.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.caliper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Apache Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.commons-logging.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.commons-logging.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.log4j.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.log4j.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.hpack.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.hpack.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.hyper-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.nghttp2-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.commons-lang.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.commons-lang.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the Maven build.
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
 
  * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://www.opensource.apple.com/source/configd/configd-453.19/dnsinfo/dnsinfo.h
 
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
index 290d937..207bf34 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -217,21 +217,21 @@ Apache Software License, Version 2.
 - lib/commons-io-commons-io-2.7.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-dns-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.63.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.63.Final.jar [11]
-- lib/io.netty-netty-common-4.1.63.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.63.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.63.Final.jar [11]
-- lib/io.netty-netty-resolver-dns-4.1.63.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.63.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-dns-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.68.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.68.Final.jar [11]
+- lib/io.netty-netty-common-4.1.68.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.68.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.68.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.68.Final.jar [11]
+- lib/io.netty-netty-resolver-dns-4.1.68.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.42.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.68.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.68.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.68.Final.jar [11]
 - lib/io.prometheus-simpleclient-0.8.1.jar [12]
 - lib/io.prometheus-simpleclient_common-0.8.1.jar [12]
 - lib/io.prometheus-simpleclient_hotspot-0.8.1.jar [12]
@@ -310,7 +310,7 @@ Apache Software License, Version 2.
 [8] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-io.git;a=tag;h=603579
 [9] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-lang.git;a=tag;h=375459
 [10] Source available at http://svn.apache.org/viewvc/commons/proper/logging/tags/commons-logging-1.1.1/
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.63.Final
+[11] Source available at https://github.com/netty/netty/tree/netty-4.1.68.Final
 [12] Source available at https://github.com/prometheus/client_java/tree/parent-0.8.1
 [13] Source available at https://github.com/vert-x3/vertx-auth/tree/3.9.8
 [14] Source available at https://github.com/vert-x3/vertx-bridge-common/tree/3.9.8
@@ -349,229 +349,229 @@ Apache Software License, Version 2.
 [50] Source available at https://github.com/google/snappy/releases/tag/1.1.7
 
 ------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.63.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.68.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the extensions to Java Collections Framework which has
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the extensions to Java Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jsr166y.txt (Public Domain)
+    * deps/netty-4.1.68.Final/LICENSE.jsr166y.txt (Public Domain)
   * HOMEPAGE:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.base64.txt (Public Domain)
+    * deps/netty-4.1.68.Final/LICENSE.base64.txt (Public Domain)
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Webbit', an event based
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.webbit.txt (BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.webbit.txt (BSD License)
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.slf4j.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.slf4j.txt (MIT License)
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
-    * deps/netty-4.1.63.Final/NOTICE.harmony.txt
+    * deps/netty-4.1.68.Final/NOTICE.harmony.txt
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.harmony.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.harmony.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jbzip2.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.jbzip2.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.libdivsufsort.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jctools.txt (ASL2 License)
+    * deps/netty-4.1.68.Final/LICENSE.jctools.txt (ASL2 License)
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jzlib.txt (BSD style License)
+    * deps/netty-4.1.68.Final/LICENSE.jzlib.txt (BSD style License)
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lz4', a LZ4 Java compression
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'lz4', a LZ4 Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.lz4.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.lz4.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.lzma-java.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.lzma-java.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jfastlz.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.jfastlz.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.protobuf.txt (New BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.protobuf.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.bouncycastle.txt (MIT License)
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Snappy', a compression library produced
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Snappy', a compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.snappy.txt (New BSD License)
+    * deps/netty-4.1.68.Final/LICENSE.snappy.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Caliper', Google's micro-
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Caliper', Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.caliper.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.caliper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Apache Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.commons-logging.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.commons-logging.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.log4j.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.log4j.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
+lib/io.netty-netty-codec-4.1.68.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.hpack.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.hpack.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.hyper-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt (MIT License)
+    * deps/netty-4.1.68.Final/LICENSE.nghttp2-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.68.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.commons-lang.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.commons-lang.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the Maven build.
 
   * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.63.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.68.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
 
  * LICENSE:
-    * deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
+    * deps/netty-4.1.68.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://www.opensource.apple.com/source/configd/configd-453.19/dnsinfo/dnsinfo.h
 
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
index 043c371..76e5637 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
@@ -22,21 +22,21 @@ LongAdder), which was released with the following comments:
     http://creativecommons.org/publicdomain/zero/1.0/
 
 ------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.63.Final.jar
-- lib/io.netty-netty-codec-4.1.63.Final.jar
-- lib/io.netty-netty-codec-dns-4.1.63.Final.jar
-- lib/io.netty-netty-codec-http-4.1.63.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.63.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.63.Final.jar
-- lib/io.netty-netty-common-4.1.63.Final.jar
-- lib/io.netty-netty-handler-4.1.63.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar
-- lib/io.netty-netty-resolver-4.1.63.Final.jar
-- lib/io.netty-netty-resolver-dns-4.1.63.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar
-- lib/io.netty-netty-transport-4.1.63.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar
+- lib/io.netty-netty-buffer-4.1.68.Final.jar
+- lib/io.netty-netty-codec-4.1.68.Final.jar
+- lib/io.netty-netty-codec-dns-4.1.68.Final.jar
+- lib/io.netty-netty-codec-http-4.1.68.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.68.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.68.Final.jar
+- lib/io.netty-netty-common-4.1.68.Final.jar
+- lib/io.netty-netty-handler-4.1.68.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.68.Final.jar
+- lib/io.netty-netty-resolver-4.1.68.Final.jar
+- lib/io.netty-netty-resolver-dns-4.1.68.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.42.Final.jar
+- lib/io.netty-netty-transport-4.1.68.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.68.Final-linux-x86_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.68.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
index d4bf93c..93aa17f 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
@@ -5,19 +5,19 @@ This product includes software developed at
 The Apache Software Foundation (http://www.apache.org/).
 
 ------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.63.Final.jar
-- lib/io.netty-netty-codec-4.1.63.Final.jar
-- lib/io.netty-netty-codec-http-4.1.63.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.63.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.63.Final.jar
-- lib/io.netty-netty-common-4.1.63.Final.jar
-- lib/io.netty-netty-handler-4.1.63.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar
-- lib/io.netty-netty-resolver-4.1.63.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar
-- lib/io.netty-netty-transport-4.1.63.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar
+- lib/io.netty-netty-buffer-4.1.68.Final.jar
+- lib/io.netty-netty-codec-4.1.68.Final.jar
+- lib/io.netty-netty-codec-http-4.1.68.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.68.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.68.Final.jar
+- lib/io.netty-netty-common-4.1.68.Final.jar
+- lib/io.netty-netty-handler-4.1.68.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.68.Final.jar
+- lib/io.netty-netty-resolver-4.1.68.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.42.Final.jar
+- lib/io.netty-netty-transport-4.1.68.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.68.Final-linux-x86_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.68.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
index 0ede3b7..56e37cd 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
@@ -5,21 +5,21 @@ This product includes software developed at
 The Apache Software Foundation (http://www.apache.org/).
 
 ------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.63.Final.jar
-- lib/io.netty-netty-codec-4.1.63.Final.jar
-- lib/io.netty-netty-codec-dns-4.1.63.Final.jar
-- lib/io.netty-netty-codec-http-4.1.63.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.63.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.63.Final.jar
-- lib/io.netty-netty-common-4.1.63.Final.jar
-- lib/io.netty-netty-handler-4.1.63.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar
-- lib/io.netty-netty-resolver-4.1.63.Final.jar
-- lib/io.netty-netty-resolver-dns-4.1.63.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar
-- lib/io.netty-netty-transport-4.1.63.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar
+- lib/io.netty-netty-buffer-4.1.68.Final.jar
+- lib/io.netty-netty-codec-4.1.68.Final.jar
+- lib/io.netty-netty-codec-dns-4.1.68.Final.jar
+- lib/io.netty-netty-codec-http-4.1.68.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.68.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.68.Final.jar
+- lib/io.netty-netty-common-4.1.68.Final.jar
+- lib/io.netty-netty-handler-4.1.68.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.68.Final.jar
+- lib/io.netty-netty-resolver-4.1.68.Final.jar
+- lib/io.netty-netty-resolver-dns-4.1.68.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.42.Final.jar
+- lib/io.netty-netty-transport-4.1.68.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.68.Final-linux-x86_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.68.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.aalto-xml.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.aalto-xml.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.base64.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.base64.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.base64.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.base64.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.bouncycastle.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.bouncycastle.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.caliper.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.caliper.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.caliper.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.caliper.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.commons-lang.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.commons-lang.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.commons-lang.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.commons-lang.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.commons-logging.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.commons-logging.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.commons-logging.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.commons-logging.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.compress-lzf.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.compress-lzf.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.dnsinfo.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.dnsinfo.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.harmony.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.harmony.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.harmony.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.harmony.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.hpack.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.hpack.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.hpack.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.hpack.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.hyper-hpack.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.hyper-hpack.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jboss-marshalling.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jboss-marshalling.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jbzip2.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jbzip2.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jbzip2.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jbzip2.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jctools.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jctools.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jctools.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jctools.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jfastlz.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jfastlz.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jfastlz.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jfastlz.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jsr166y.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jsr166y.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jsr166y.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jsr166y.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jzlib.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jzlib.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jzlib.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.jzlib.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.libdivsufsort.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.libdivsufsort.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.log4j.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.log4j.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.log4j.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.log4j.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.lz4.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.lz4.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.lz4.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.lz4.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.lzma-java.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.lzma-java.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.lzma-java.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.lzma-java.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.mvn-wrapper.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.mvn-wrapper.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.nghttp2-hpack.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.nghttp2-hpack.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.protobuf.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.protobuf.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.protobuf.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.protobuf.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.slf4j.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.slf4j.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.slf4j.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.slf4j.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.snappy.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.snappy.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.snappy.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.snappy.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.webbit.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.webbit.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.webbit.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/LICENSE.webbit.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/NOTICE.harmony.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/NOTICE.harmony.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/NOTICE.harmony.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.68.Final/NOTICE.harmony.txt
diff --git a/dependencies.gradle b/dependencies.gradle
index 1e12e79..0cc5f94 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -62,8 +62,8 @@ depVersions = [
     lombok: "1.18.20",
     lz4: "1.3.0",
     mockito: "3.0.0",
-    netty: "4.1.63.Final",
-    nettyTcnativeBoringSsl: "2.0.38.Final",
+    netty: "4.1.68.Final",
+    nettyTcnativeBoringSsl: "2.0.42.Final",
     powermock: "2.0.2",
     prometheus: "0.0.21",
     protobuf: "3.14.0",
diff --git a/pom.xml b/pom.xml
index a1cd50f..f9d01f3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -147,8 +147,8 @@
     <lombok.version>1.18.20</lombok.version>
     <lz4.version>1.3.0</lz4.version>
     <mockito.version>3.0.0</mockito.version>
-    <netty.version>4.1.63.Final</netty.version>
-    <netty-boringssl.version>2.0.38.Final</netty-boringssl.version>
+    <netty.version>4.1.68.Final</netty.version>
+    <netty-boringssl.version>2.0.42.Final</netty-boringssl.version>
     <ostrich.version>9.1.3</ostrich.version>
     <powermock.version>2.0.2</powermock.version>
     <prometheus.version>0.8.1</prometheus.version>