Bump Jackson to 2.9.10

To address CVE-2019-14540 and CVE-2019-16335. Note Jackson is an
optional dependency, required only when using the JSON-RPC support.

(cherry picked from commit 0eda16c)

Author: acogoluegnes

pom.xml

@@ -57,7 +57,7 @@
     <slf4j.version>1.7.28</slf4j.version>
     <metrics.version>4.1.0</metrics.version>
     <micrometer.version>1.2.1</micrometer.version>
-    <jackson.version>2.9.9.3</jackson.version>
+    <jackson.version>2.9.10</jackson.version>
     <logback.version>1.2.3</logback.version>
     <junit.version>4.12</junit.version>
     <awaitility.version>4.0.1</awaitility.version>