use libyaml 0.1.5 for CVE-2013-6393