diff --git a/cloud/pom.xml b/cloud/pom.xml
index 78305fa3a59db..f1d78ee6ae212 100644
--- a/cloud/pom.xml
+++ b/cloud/pom.xml
@@ -53,6 +53,12 @@
       <groupId>org.apache.hadoop</groupId>
       <artifactId>hadoop-aws</artifactId>
       <scope>${hadoop.deps.scope}</scope>
+      <exclusions>
+        <exclusion>
+          <groupId>com.fasterxml.jackson.dataformat</groupId>
+          <artifactId>jackson-dataformat-cbor</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
 
     <dependency>
diff --git a/dev/deps/spark-deps-hadoop-palantir b/dev/deps/spark-deps-hadoop-palantir
index f8c636c6cd8b9..3f2985dd2167c 100644
--- a/dev/deps/spark-deps-hadoop-palantir
+++ b/dev/deps/spark-deps-hadoop-palantir
@@ -137,7 +137,7 @@ jetty-sslengine-6.1.26.jar
 jetty-util-6.1.26.jar
 jline-2.12.1.jar
 jmespath-java-1.0.jar
-joda-time-2.9.3.jar
+joda-time-2.9.9.jar
 jodd-core-3.5.2.jar
 json-smart-1.1.1.jar
 json4s-ast_2.11-3.2.11.jar
diff --git a/pom.xml b/pom.xml
index c0aa9fea112a8..67e9de082dbbc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -177,7 +177,7 @@
     <datanucleus-core.version>3.2.10</datanucleus-core.version>
     <janino.version>3.0.0</janino.version>
     <jersey.version>2.22.2</jersey.version>
-    <joda.version>2.9.3</joda.version>
+    <joda.version>2.9.9</joda.version>
     <jodd.version>3.5.2</jodd.version>
     <jsr305.version>1.3.9</jsr305.version>
     <libthrift.version>0.9.3</libthrift.version>