diff --git a/dev/deps/spark-deps-hadoop-palantir b/dev/deps/spark-deps-hadoop-palantir
index dc05fb8fb9133..39b0a1575bae6 100644
--- a/dev/deps/spark-deps-hadoop-palantir
+++ b/dev/deps/spark-deps-hadoop-palantir
@@ -32,7 +32,7 @@ calcite-core-1.2.0-incubating.jar
 calcite-linq4j-1.2.0-incubating.jar
 chill-java-0.8.0.jar
 chill_2.11-0.8.0.jar
-commons-beanutils-1.7.0.jar
+commons-beanutils-1.9.3.jar
 commons-beanutils-core-1.8.0.jar
 commons-cli-1.2.jar
 commons-codec-1.10.jar
@@ -169,7 +169,7 @@ mx4j-3.0.2.jar
 netty-3.10.6.Final.jar
 netty-all-4.1.9.Final.jar
 nimbus-jose-jwt-3.9.jar
-objenesis-2.1.jar
+objenesis-2.5.1.jar
 okhttp-2.7.5.jar
 okhttp-3.7.0.jar
 okio-1.12.0.jar
diff --git a/pom.xml b/pom.xml
index 55e3acce98de9..2530ab540ff18 100644
--- a/pom.xml
+++ b/pom.xml
@@ -152,6 +152,7 @@
     <aws.java.sdk.version>1.11.76</aws.java.sdk.version>
     <!-- the producer is used in tests -->
     <aws.kinesis.producer.version>0.10.2</aws.kinesis.producer.version>
+    <commons-beanutils.version>1.9.3</commons-beanutils.version>
     <!--  org.apache.httpcomponents/httpclient-->
     <commons.httpclient.version>4.5.3</commons.httpclient.version>
     <commons.httpcore.version>4.4.6</commons.httpcore.version>
@@ -174,6 +175,8 @@
     <!-- org.apache.commons/commons-lang3/-->
     <commons-lang3.version>3.5</commons-lang3.version>
     <datanucleus-core.version>3.2.10</datanucleus-core.version>
+    <javax-activation.version>1.1.1</javax-activation.version>
+    <objenesis.version>2.5.1</objenesis.version>
     <janino.version>3.0.0</janino.version>
     <jersey.version>2.25.1</jersey.version>
     <joda.version>2.9.9</joda.version>
@@ -446,6 +449,11 @@
         <version>${jetty.version}</version>
         <scope>provided</scope>
       </dependency>
+      <dependency>
+        <groupId>org.objenesis</groupId>
+        <artifactId>objenesis</artifactId>
+        <version>${objenesis.version}</version>
+      </dependency>
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
@@ -453,6 +461,11 @@
         <scope>provided</scope>
       </dependency>
       <!-- End of shaded deps -->
+      <dependency>
+        <groupId>commons-beanutils</groupId>
+        <artifactId>commons-beanutils</artifactId>
+        <version>${commons-beanutils.version}</version>
+      </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-lang3</artifactId>
@@ -733,6 +746,11 @@
         <artifactId>jersey-client</artifactId>
         <version>${jersey.version}</version>
       </dependency>
+      <dependency>
+        <groupId>javax.inject</groupId>
+        <artifactId>activation</artifactId>
+        <version>${javax-activation.version}</version>
+      </dependency>
       <dependency>
         <groupId>javax.ws.rs</groupId>
         <artifactId>javax.ws.rs-api</artifactId>