update 2.7 release notes wrt #2326 patch

FasterXML · May 28, 2019 · b596365 · b596365
1 parent d30f036
commit b596365
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/release-notes/VERSION b/release-notes/VERSION
@@ -4,6 +4,11 @@ Project: jackson-databind
 === Releases ===
 ------------------------------------------------------------------------
 
+Not yet released
+
+#2326: Block class for CVE-2019-12086
+ (contributed by MaximilianTews@github)
+
 2.7.9.5 (23-Nov-2018)
 
 #1899: Another two gadgets to exploit default typing issue in jackson-databind