add cve id

Author: cowtowncoder

release-notes/VERSION

@@ -18,7 +18,7 @@ Project: jackson-databind
 #2498: Block one more gadget type (log4j-extras/1.2, CVE-2019-17531)
 #2526: Block two more gadget types (ehcache/JNDI, CVE-2019-20330)
   (reported by UltramanGaia)
-#2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-xxxxx)
+#2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-8840)
   (reported by threedr3am)
 
 2.8.11.4 (25-Jul-2019)