diff --git a/pom.xml b/pom.xml
index e6faeead22..0813ff7dd4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
com.fasterxml.jackson
jackson-base
- 2.9.10.20200103
+ 2.9.10.20200223
com.fasterxml.jackson.core
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index 6f1d5ba36c..3507a7669a 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -4,7 +4,7 @@ Project: jackson-databind
=== Releases ===
------------------------------------------------------------------------
-2.9.10.3 (not released yet)
+2.9.10.3 (23-Feb-2020)
#2620: Block one more gadget type (xbean-reflect/JNDI - CVE-2020-8840)
(reported by threedr3am@github)