Merge branch '2.10' into 2.11

Author: cowtowncoder

release-notes/VERSION-2.x

@@ -258,11 +258,11 @@ Project: jackson-databind
  (reported by threedr3am'follower)
 #2662: Block one more gadget type (bus-proxy, CVE-2020-10968)
  (reported by XuYuanzhen)
-#2664: Block one more gadget type (activemq-pool[-jms])
+#2664: Block one more gadget type (activemq-pool[-jms], CVE-2020-11111)
  (reported by Srikanth Ramu)
-#2666: Block one more gadget type (apache/commons-proxy)
+#2666: Block one more gadget type (apache/commons-proxy, CVE-2020-11112)
  (reported by Yiting Fan)
-#2670: Block one more gadget type (openjpa)
+#2670: Block one more gadget type (openjpa, CVE-2020-11113)
  (reported by XuYuanzhen)
 
 2.9.10.3 (23-Feb-2020)