Merge branch '2.10'

Author: cowtowncoder

release-notes/VERSION-2.x

@@ -131,8 +131,8 @@ Project: jackson-databind
   (reported by iSafeBlue@github / [email protected])
 #2420: Block one more gadget type (no CVE allocated yet)
   (reported by [email protected])
-#2449: Block one more gadget type (no CVE allocated yet)
-  (reported by Kaki K)
+#2449: Block one more gadget type (CVE-2019-14540)
+  (reported by kingkk)
 
 2.9.9 (16-May-2019)