Update 2.14.15 release notes
Change-Id: I65dbda02e14546e6b3a4e8a57f66995a2a08ab20
diff --git a/pages/site/releases/2.14.md b/pages/site/releases/2.14.md
index 66371bf..3e1bec2 100644
--- a/pages/site/releases/2.14.md
+++ b/pages/site/releases/2.14.md
@@ -343,6 +343,14 @@
This release of JGit implements validation of `.gitmodules` files to protect
unguarded tools against CVE-2018-17456.
+* [Issue 9823](https://bugs.chromium.org/p/gerrit/issues/detail?id=9823):
+Fix force push permission check for administrators and project owners over SSH.
+
+ It was possible for an administrator or project owner to force push to
+ a project over SSH without having the Force Push permission.
+
+ This issue did not affect regular users, or pushes over HTTP.
+
* Update jackson-core to 2.9.7.
There have been several releases since 2.6.6 including many bug fixes
