This is part of the second part of the security rollup to 2.3.18 for EPEL5. These packages don’t have security updates, but their dependencies of activerecord, activesupport and actionpack do.