Merge branch '2.13' into 2.14

Author: cowtowncoder

release-notes/VERSION-2.x

@@ -24,7 +24,7 @@ Project: jackson-dataformat-xml
 
 2.13.5 (not yet released)
 
-* Upgrade Woodstox to 6.4.0 for a fix to one CVE
+* Upgrade Woodstox to 6.4.0 for a fix to [CVE-2022-40152]
 
 2.13.4 (03-Sep-2022)