[CVE-2014-0160] - OpenSSL 1.0.1g
update ruby to link to embedded gdbm
update curl to build without gnutls
Properly declare the release script's deps

Previously we made the assumption that `mixlib-shellout` is installed
on any machine that would execute the release script.
update CHANGELOG for 11.0.12
Merge pull request #53 from opscode/sd/CVE-2014-0160

CVE-2014-0160