diff --git a/pom.xml b/pom.xml
index b9d357be68..a789d1de47 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,12 +5,12 @@
com.fasterxml.jackson
jackson-base
- 2.10.6-SNAPSHOT
+ 2.10.5.20201202
com.fasterxml.jackson.core
jackson-databind
- 2.10.6-SNAPSHOT
+ 2.10.5.1-SNAPSHOT
jackson-databind
bundle
General data-binding functionality for Jackson: works on core streaming API
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index d736a52093..b896d3fca6 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -4,7 +4,7 @@ Project: jackson-databind
=== Releases ===
------------------------------------------------------------------------
-(not yet released)
+2.10.5.1 (02-Dec-2020)
#2589: `DOMDeserializer`: setExpandEntityReferences(false) may not prevent
external entity expansion in all cases (CVE-2020-25649)