Update libyaml to 0.1.6

Security fix for CVE-2014-2525

Advisory: http://www.ocert.org/advisories/ocert-2014-003.html

Closes #533