Add warning about CVE-2013-6393 to CHANGELOG [ci skip]

Actually resolves https://github.com/sstephenson/ruby-build/issues/499.