We've just released new versions of Jenkins to fix several security vulnerabilities.
These vulnerabilities affect all previous releases:
- mainline releases up to and including 1.640
- LTS releases up to and including 1.625.2
We recommend updating to the new releases:
- mainline 1.641
- LTS 1.625.3
Please see the advisory for more details:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09