diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index 1841465a84..d878840be7 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -6,7 +6,7 @@ Project: jackson-databind
 
 2.9.10.2 (03-Jan-2020)
 
-#2526: Block two more gadget types (ehcache/JNDI - CVEs to be allocated)
+#2526: Block two more gadget types (ehcache/JNDI - CVE-2019-20330)
   (repoerted by UltramanGaia)
 #2544: java.lang.NoClassDefFoundError Thrown for compact profile1
   (reported by Jon A)