here: https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27 ok ian@ (MAINTAINER), sthen@