[Security] Bump netty4.version from 4.1.48.Final to 4.1.63.Final (#11117)

diff --git a/licenses.yaml b/licenses.yaml
index f4b9cf4..b2834d0 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -1235,7 +1235,7 @@
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 4.1.48.Final
+version: 4.1.63.Final
 libraries:
   - io.netty: netty-buffer
   - io.netty: netty-codec
diff --git a/pom.xml b/pom.xml
index fbe6b34..6ef3bca 100644
--- a/pom.xml
+++ b/pom.xml
@@ -100,7 +100,7 @@
         <netty3.version>3.10.6.Final</netty3.version>
         <resilience4j.version>1.3.1</resilience4j.version>
         <!-- Spark updated in https://github.com/apache/spark/pull/19884 -->
-        <netty4.version>4.1.48.Final</netty4.version>
+        <netty4.version>4.1.63.Final</netty4.version>
         <node.version>v10.24.0</node.version>
         <npm.version>6.14.11</npm.version>
         <postgresql.version>42.2.14</postgresql.version>