Update rails after security bulletin