Backport Patches for CVE-2013-0333

More info here.  https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo

/cc @github/security