Release notes for Gerrit 2.15.5
Change-Id: If06422d9d6413de0c61d0fe205e314e0bb169b04
diff --git a/pages/site/releases/2.15.md b/pages/site/releases/2.15.md
index 3a9f7b3..54a85ad 100644
--- a/pages/site/releases/2.15.md
+++ b/pages/site/releases/2.15.md
@@ -391,6 +391,32 @@
* Update Soy to 2017-04-23
++### 2.15.5
+
+* Update JGit to 4.9.6.201810051924-r to fix
+[CVE-2018-17456](https://nvd.nist.gov/vuln/detail/CVE-2018-17456).
+
+ This release of JGit implements validation of `.gitmodules` files to protect
+ unguarded tools against CVE-2018-17456.
+
+* Update jackson-core to 2.9.7.
+
+ There have been several releases since 2.6.6 including many bug fixes
+ and security fixes.
+
+* Update elasticsearch-rest-client to 6.4.2.
+
+* [Issue 9705](https://bugs.chromium.org/p/gerrit/issues/detail?id=9705):
+Fix blank dropdown for 'Only serve as parent for other repositories' option
+when creating a new repository.
+
+* [Issue 9610](https://bugs.chromium.org/p/gerrit/issues/detail?id=9610):
+Add support for showing the 'effective' value of the max object size limit
+setting.
+
+* [Issue 9787](https://bugs.chromium.org/p/gerrit/issues/detail?id=9787):
+Fix permisson check for toggling WIP flag when posting review.
+
### 2.15.4
* [Issue 7053](https://bugs.chromium.org/p/gerrit/issues/detail?id=7053):
