From 3d2903e8a4bda40257115d6ec70d8e8770365296 Mon Sep 17 00:00:00 2001 From: Tatu Saloranta Date: Thu, 17 Dec 2020 16:13:04 -0800 Subject: [PATCH] Update release notes wrt #2986 --- release-notes/VERSION-2.x | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x index 2af8b31497..9427349c25 100644 --- a/release-notes/VERSION-2.x +++ b/release-notes/VERSION-2.x @@ -6,7 +6,7 @@ Project: jackson-databind 2.9.10.8 (not yet released) -#2986: Block two more gadget types +#2986: Block two more gadget types (commons-dbcp2, CVE-2020-35490/CVE-2020-35491) (reported by Al1ex@knownsec) 2.9.10.7 (02-Dec-2020)