Update 2.16.19 release notes
Change-Id: Ib009ca32318465d6bd90da20080a1ccd1a66977e
diff --git a/pages/site/releases/2.16.md b/pages/site/releases/2.16.md
index 103df2e..f1f3eab 100644
--- a/pages/site/releases/2.16.md
+++ b/pages/site/releases/2.16.md
@@ -657,8 +657,20 @@
* [Issue 12747](https://bugs.chromium.org/p/gerrit/issues/detail?id=12747):
Fix change query visibility for internal user.
+ * [Issue 12755](https://bugs.chromium.org/p/gerrit/issues/detail?id=12755):
+ Block the removal of the Realm primary external ids.
+
+ It was possible to remove the email address associated with the primary
+ id of a Realm, effectively resulting in the account being removed.
+
* Fix internal server error on parsing commit message during receive commits.
+ * Add `autocomplete="off"` to LDAP login form.
+
+ Some security tools will flag the absence of the autocomplete flag as a
+ possible security issue, as it could allow for passwords to be saved and
+ automatically filled in on shared computers.
+
* [Issue 12646](https://bugs.chromium.org/p/gerrit/issues/detail?id=12646):
Fix incorrect highlighting of diffs in the GWT UI.
@@ -725,6 +737,9 @@
one of its pushes was pending since its state would never receive the completion
notification for that push.
+ * [Issue 11745](https://bugs.chromium.org/p/gerrit/issues/detail?id=11745):
+ Fix firing pending "..all.." events on startup.
+
* Fix URL matching to match real URLs in addition to templated URLs.
* Log when skipping deletion of a ref when pushing to a remote in mirror mode.
