Security update, ref. CVE-2014-7829 (Rails)