(CVE-2014-2525) Update libyaml to 0.1.6

Without this patch we're linking against libyaml 0.1.4 for all of the
Ruby runtimes.  This is a problem because of cve-2014-2525.

This patch addresses the problem by updating YAML to 0.1.6 which closes
the vulnerability.