diff --git a/pom.xml b/pom.xml
index 299597f711fb..c3b920fef9d5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -584,8 +584,12 @@
     <httpclient.version>4.5.13</httpclient.version>
     <httpcore.version>4.4.13</httpcore.version>
     <metrics-core.version>3.2.6</metrics-core.version>
-    <jackson.version>2.15.2</jackson.version>
-    <jackson.databind.version>2.15.2</jackson.databind.version>
+    <!--
+      Note that the version of jackson-[annotations,core,databind] must be kept in sync with the
+      version of jackson-jaxrs-json-provider shipped in hbase-thirdparty.
+    -->
+    <jackson.version>2.17.2</jackson.version>
+    <jackson.databind.version>2.17.2</jackson.databind.version>
     <jaxb-api.version>2.3.1</jaxb-api.version>
     <servlet.api.version>3.1.0</servlet.api.version>
     <wx.rs.api.version>2.1.1</wx.rs.api.version>
@@ -604,7 +608,7 @@
     <external.protoc.version>${external.protobuf.version}</external.protoc.version>
     <!--Version of protobuf that hbase uses internally (we shade our pb)
          Must match what is out in hbase-thirdparty include. -->
-    <internal.protobuf.version>3.24.3</internal.protobuf.version>
+    <internal.protobuf.version>3.28.2</internal.protobuf.version>
     <protobuf.plugin.version>0.6.1</protobuf.plugin.version>
     <thrift.path>thrift</thrift.path>
     <thrift.version>0.14.1</thrift.version>
@@ -658,7 +662,12 @@
     <snappy.version>1.1.10.4</snappy.version>
     <xz.version>1.9</xz.version>
     <zstd-jni.version>1.5.5-2</zstd-jni.version>
-    <hbase-thirdparty.version>4.1.5</hbase-thirdparty.version>
+    <!--
+        Note that the version of protobuf shipped in hbase-thirdparty must match the version used
+        in internal.protobuf.version. The version of jackson-[annotations,core, databind] must be
+        kept in sync with the version of jackson-jaxrs-json-provider shipped in hbase-thirdparty.
+    -->
+    <hbase-thirdparty.version>4.1.9</hbase-thirdparty.version>
     <!-- Coverage properties -->
     <jacoco.version>0.8.8</jacoco.version>
     <jacocoArgLine/>
@@ -5074,4 +5083,11 @@
       </properties>
     </profile>
   </profiles>
+  <repositories>
+    <repository>
+      <id>hbase-thirdparty-4.1.9RC0</id>
+      <name>hbase-thirdparty-4.1.9RC0</name>
+      <url>https://repository.apache.org/content/repositories/orgapachehbase-1556/</url>
+    </repository>
+  </repositories>
 </project>