Merge branch '2.8' into 2.9

cowtowncoder · cowtowncoder · commit a906722d6e16 · 2019-09-16T11:16:03.000-07:00
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
@@ -20,8 +20,8 @@ Project: jackson-databind
   (reported by iSafeBlue@github / blue@ixsec.org)
 #2420: Block one more gadget type (no CVE allocated yet)
   (reported by crazylirui@gmail.com)
-#2449: Block one more gadget type (no CVE allocated yet)
-  (reported by Kaki K)
+#2449: Block one more gadget type (CVE-2019-14540)
+  (reported by kingkk)
 
 2.9.9 (16-May-2019)
 
