updating to Rails 3.2.11 and fixing potential SQL security injection and paramater parsing vulnerabilities