ruby-rails: upgrade to 4.0.12 (CVE-2013-0334, CVE-2014-7818, CVE-2014-7819)

fixes #3476
fixes #3582
fixes #3586
ruby-redmine-rails: upgrade to 3.2.21 (CVE-2014-7818, CVE-2014-7819)

fixes #3582
fixes #3586