added yaml-0.1.6 to 2.1.1 for CVE-2014-2525