Rails security updates.
CHANGELOG update for Release 1.1.8.