Block one more gadget type (aries.transaction.jms, CVE-2020-10672)

[cowtowncoder]

Another gadget type(s) reported regarding class(es) of org.apache.aries.transaction.jms.
See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for description of the general problem.

CVE id: CVE-2020-10672
Reporter: Srikanth Ramu, threedr3am'follower, (concurrent reports)

Fix will be included in:

• 2.9.10.4
• Does not affect 2.10.0 and later