Update release notes wrt #1931

Author: cowtowncoder

release-notes/CREDITS-2.x

@@ -749,3 +749,7 @@ Deblock Thomas (deblockt@github)
   * Reported, contributed fix for #1912: `BeanDeserializerModifier.updateBuilder()` does not
     work to set custom  deserializer on a property (since 2.9.0)
  (contributed by Deblock T)
+
+lilei@venusgroup.com.cn:
+  * Reported #1931: Two more `c3p0` gadgets to exploit default typing issue
+   (2.9.5)

release-notes/VERSION-2.x

@@ -13,6 +13,7 @@ Project: jackson-databind
   deserializer on a property (since 2.9.0)
  (contributed by Deblock T)
 #1931: Two more `c3p0` gadgets to exploit default typing issue
+ (reported by lilei@venusgroup.com.cn)
 
 2.9.4 (24-Jan-2018)