Release notes for Gerrit 2.14.15
Change-Id: I99fb803e8bec286d77bb4897facd0c77e6a0466c
diff --git a/pages/site/releases/2.14.md b/pages/site/releases/2.14.md
index 52f7ca8..66371bf 100644
--- a/pages/site/releases/2.14.md
+++ b/pages/site/releases/2.14.md
@@ -335,6 +335,21 @@
## Bugfix Releases
+### 2.14.15
+
+* Update JGit to 4.7.5.201810051826-r to fix
+[CVE-2018-17456](https://nvd.nist.gov/vuln/detail/CVE-2018-17456).
+
+ This release of JGit implements validation of `.gitmodules` files to protect
+ unguarded tools against CVE-2018-17456.
+
+* Update jackson-core to 2.9.7.
+
+ There have been several releases since 2.6.6 including many bug fixes
+ and security fixes.
+
+* Update elasticsearch-rest-client to 6.4.2.
+
### 2.14.14
* [Issue 9761](https://bugs.chromium.org/p/gerrit/issues/detail?id=9761):
