add write up for CVE-2012-3586
update gemfile.lock