CVE-2013-6417

c.f. https://groups.google.com/forum/#!topic/ruby-security-ann/niK4drpSHT4

cc @tmm1, @mastahyeti, @ptoomey3, @charliesome