upgrade ruby for CVE-2014-2525