ruby193 security update

CentOS Errata and Security Advisory CESA-2014:0510

Ruby on Rails is a model-view-controller (MVC) framework for web
application development. Action Pack implements the controller and the
view components.

A directory traversal flaw was found in the way Ruby on Rails handled
wildcard segments in routes with implicit rendering. A remote attacker
could use this flaw to retrieve arbitrary local files accessible to a Ruby
on Rails application using the aforementioned routes via a specially
crafted request. (CVE-2014-0130)

All ruby193-rubygem-actionpack users are advised to upgrade to these
updated packages, which contain a backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2014-May/082470.html

Affected packages:
ruby193-rubygem-actionpack
ruby193-rubygem-actionpack-doc

Upstream details at:
https://access.redhat.com/errata/RHSA-2014:0510