Merge branch '2.7' into 2.8
diff --git a/release-notes/VERSION b/release-notes/VERSION
index 7a7cbdc..64a7f49 100644
--- a/release-notes/VERSION
+++ b/release-notes/VERSION
@@ -3,17 +3,18 @@
=== Releases ===
------------------------------------------------------------------------
-2.8.11.4 (not released)
+2.8.11.4 (25-Jul-2019)
#2326: Block one more gadget type (CVE-2019-12086)
#2334: Block class for CVE-2019-12384
#2341: Block class for CVE-2019-12814
-#2387: Block yet another deserialization gadget (EHCache, CVE-2019-xxxxx?)
-#2389: Block yet another deserialization gadget (Logback, CVE-2019-xxxxx?)
+#2387: Block one more gadget type (EHCache, CVE-2019-xxxxx?)
+#2389: Block one more gadget type (CVE-2019-14439)
+ (reported by xiexq)
2.8.11.3 (23-Nov-2018)
-#2326: Block class for CVE-2019-12086
+#2326: Block one more gadget type (CVE-2019-12086)
(contributed by MaximilianTews@github)
2.8.11.2 (08-Jun-2018)