update ruby for CVE-2014-2525
Merge pull request #103 from heroku/fix-CVE-2014-2525

update ruby for CVE-2014-2525