reorder entries in release-notes

Author: cowtowncoder

release-notes/VERSION

@@ -6,23 +6,23 @@ Project: jackson-databind
 
 2.7.9.7 (not yet released)
 
-#2631: Block one more gadget type (shaded-hikari-config, CVE-2020-9546)
- (reported by threedr3am & LFY)
-#2634: Block two more gadget types (ibatis-sqlmap, anteros-core; CVE-2020-9547 / CVE-2020-9548)
- (reported by threedr3am & V1ZkRA)
-#2642: Block one more gadget type (javax.swing, CVE-to-be-allocated)
- (reported by threedr3am)
 #2410: Block one more gadget type (HikariCP, CVE-2019-14540)
 #2420: Block one more gadget type (cxf-jax-rs, no CVE allocated yet)
 #2449: Block one more gadget type (HikariCP, CVE-2019-14439 / CVE-2019-16335)
 #2462: Block two more gadget types (commons-configuration/-2)
 #2478: Block two more gadget types (commons-dbcp, p6spy, CVE-2019-16942 / CVE-2019-16943)
-#2648: Block one more gadget type (shiro-core, CVE-to-be-allocated)
 #2498: Block one more gadget type (log4j-extras/1.2, CVE-2019-17531)
 #2526: Block two more gadget types (ehcache/JNDI, CVE-2019-20330)
   (reported by UltramanGaia)
 #2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-xxxxx)
   (reported by threedr3am)
+#2631: Block one more gadget type (shaded-hikari-config, CVE-2020-9546)
+ (reported by threedr3am & LFY)
+#2634: Block two more gadget types (ibatis-sqlmap, anteros-core; CVE-2020-9547 / CVE-2020-9548)
+ (reported by threedr3am & V1ZkRA)
+#2642: Block one more gadget type (javax.swing, CVE-to-be-allocated)
+ (reported by threedr3am)
+#2648: Block one more gadget type (shiro-core, CVE-to-be-allocated)
 
 2.7.9.6 (26-Jul-2019)