upgrade ruby version:  CVE-2013-4164