Here's a pointer to the security fixes in the release as a monkeypatch to 3.2.12, without any of the other cruft:

https://github.com/discourse/discourse/blob/master/lib/freed...

The discourse folks who threw this together have an app (Rails-based forum software) that was hit very hard by the performance regressions.