Problem
New security vulnerability in nested attributes in Rails 2.3.9 and 3.0.0

Solution
More details and links to patches for upgrading here