In reply to Lisa Gittleman.

My site automatically updated to 4.1.2 a few days ago, then 4.1.3 and again with 4.1.4 applied last night. When I logged in the Dashboard showed version 4.2.1 available, which I manually installed.

Link to article about 4.1.3:
Why Some Sites Automatically Updated to WordPress 4.1.3

The downloads page was just updated to indicate that no version other than 4.2.1 is safe to use.