| commit | 01628a75401eb6660a768aa10b2568945bef752b | [log] [tgz] |
|---|---|---|
| author | Tatu Saloranta <tatu.saloranta@iki.fi> | Mon Feb 10 14:07:54 2020 -0800 |
| committer | Tatu Saloranta <tatu.saloranta@iki.fi> | Mon Feb 10 14:07:54 2020 -0800 |
| tree | 586844e7fb52661641d2e0072cae2eb9a5fd266b | |
| parent | 880ca8ed854b9970b9b61881052bfb9aba0bd0a4 [diff] | |
| parent | 6f2e36e8d04f71985b21a62667876f57414b481a [diff] |
Merge branch '2.9' into 2.10
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x index d47b01e..cdcc162 100644 --- a/release-notes/VERSION-2.x +++ b/release-notes/VERSION-2.x
@@ -180,6 +180,11 @@ deserialize as "null value" (contributed by Martin C) +2.9.10.3 (not released yet) + +#2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-8840) + (reported by threedr3am@github) + 2.9.10.2 (03-Jan-2020) #2526: Block two more gadget types (ehcache/JNDI - CVE-2019-20330)