upgrade to Ruby 2
update libyaml to 0.1.6, CVE-2014-2525