Add release notes for 2.14.21

Change-Id: I0068625792696cfe8bab3e3b1266e0ea4e19dbcd
diff --git a/pages/site/releases/2.14.md b/pages/site/releases/2.14.md
index 8734df4..41148a5 100644
--- a/pages/site/releases/2.14.md
+++ b/pages/site/releases/2.14.md
@@ -7,7 +7,8 @@
 ---
 
 
-Download: **[2.14.20](https://gerrit-releases.storage.googleapis.com/gerrit-2.14.20.war)**
+Download: **[2.14.21](https://gerrit-releases.storage.googleapis.com/gerrit-2.14.21.war)**
+| [2.14.20](https://gerrit-releases.storage.googleapis.com/gerrit-2.14.20.war)
 | [2.14.19](https://gerrit-releases.storage.googleapis.com/gerrit-2.14.19.war)
 | [2.14.18](https://gerrit-releases.storage.googleapis.com/gerrit-2.14.18.war)
 | [2.14.17](https://gerrit-releases.storage.googleapis.com/gerrit-2.14.17.war)
@@ -29,7 +30,8 @@
 | [2.14.1](https://gerrit-releases.storage.googleapis.com/gerrit-2.14.1.war)
 | [2.14](https://gerrit-releases.storage.googleapis.com/gerrit-2.14.war)
 
-Documentation: **[2.14.20](https://gerrit-documentation.storage.googleapis.com/Documentation/2.14.20/index.html)**
+Documentation: **[2.14.21](https://gerrit-documentation.storage.googleapis.com/Documentation/2.14.21/index.html)**
+| [2.14.20](https://gerrit-documentation.storage.googleapis.com/Documentation/2.14.20/index.html)
 | [2.14.19](https://gerrit-documentation.storage.googleapis.com/Documentation/2.14.19/index.html)
 | [2.14.18](https://gerrit-documentation.storage.googleapis.com/Documentation/2.14.18/index.html)
 | [2.14.17](https://gerrit-documentation.storage.googleapis.com/Documentation/2.14.17/index.html)
@@ -347,6 +349,16 @@
 
 ## Bugfix Releases
 
+### 2.14.21
+
+* Security Fixes
+
+  * [Issue 12717](https://bugs.chromium.org/p/gerrit/issues/detail?id=12717):
+  Deny access over HTTP for disabled accounts.
+
+    A disabled account was still able to access over HTTP until the existing
+    session expired.
+
 ### 2.14.20
 
 * [Issue 10695](https://bugs.chromium.org/p/gerrit/issues/detail?id=10695):