update release notes wrt dup cve id

Author: cowtowncoder

release-notes/VERSION

@@ -11,7 +11,7 @@ Project: jackson-databind
 #2334: Block one more gadget type (CVE-2019-12384)
 #2341: Block one more gadget type (CVE-2019-12814)
 #2387: Block one more gadget type (CVE-2019-14379)
-#2389: Block one more gadget type (CVE-2019-14361)
+#2389: Block one more gadget type (CVE-2019-14439)
  (reported by xiexq)
 
 2.7.9.5 (23-Nov-2018)