Merge pull request #9208 from dylanahsmith/3-2-mysql-quote-numeric

[3.2] active_record: Quote numeric values compared to string columns.
Conflicts:
	activerecord/CHANGELOG.md
Merge pull request #9224 from dylanahsmith/bigdecimal-takes-string

[3.2] Fix test failure for ruby 1.8.
Bump rack dependency to 1.4.5

Conflicts:
	actionpack/actionpack.gemspec
fixing call to columns hash. run the damn tests when you backport!
Fix issue with attr_protected where malformed input could circumvent
protection

Fixes: CVE-2013-0276
remove ruby-prof
bumping version
Merge branch '3-2-sec' into 3-2-stable

* 3-2-sec:
  bumping version
  remove ruby-prof
  Fix issue with attr_protected where malformed input could circumvent protection
  fixing call to columns hash. run the damn tests when you backport!
  Bump rack dependency to 1.4.5
  Merge pull request #9224 from dylanahsmith/bigdecimal-takes-string
  Merge pull request #9208 from dylanahsmith/3-2-mysql-quote-numeric

Conflicts:
	Gemfile
	activerecord/CHANGELOG.md
Update changelogs with version/release dates [ci skip]
Add note about attr_protected fix in Active Model changelog [ci skip]