Merge branch '2.9' into 2.10

FasterXML · Feb 10, 2020 · 01628a7 · 01628a7
2 parents 880ca8e + 6f2e36e
commit 01628a7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
@@ -180,6 +180,11 @@ Project: jackson-databind
   deserialize as "null value"
  (contributed by Martin C)
 
+2.9.10.3 (not released yet)
+
+#2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-8840)
+ (reported by threedr3am@github)
+
 2.9.10.2 (03-Jan-2020)
 
 #2526: Block two more gadget types (ehcache/JNDI - CVE-2019-20330)