Updated to Rails 3.0.20 following the *new* big scary vulnerability (https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo).

Modified Gemfile
bundle update rails (which failed, saying I needed to try gem install railties -v '3.0.20')
gem install railties -v '3.0.20'
bundle update rails