GHSA SYNC: Merged 2 OSVDB and GHSA advisories

Author: jasnow

gems/activejob/OSVDB-112347.yml gems/activejob/GHSA-mpwp-4h2m-765c.ymlgems/activejob/OSVDB-112347.yml renamed to gems/activejob/GHSA-mpwp-4h2m-765c.yml

@@ -1,10 +1,16 @@
 ---
 gem: activejob
+framework: rails
+ghsa: mpwp-4h2m-765c
 osvdb: 112347
-url: https://advisories.gitlab.com/pkg/gem/activejob/OSVDB-112347
+url: https://github.com/advisories/GHSA-mpwp-4h2m-765c
 title: Active Job - Object injection security vulnerability if Global IDs
 date: 2014-09-29
 description: |
+  Active Job vulnerability: An Active Job bug allowed String
+  arguments to be deserialized as if they were Global IDs, an
+  object injection security vulnerability.
+
   * In release post: "Active Job vulnerability:
     We also fixed an Active Job bug that allowed String
     arguments to be deserialized as if they were Global IDs,
@@ -13,7 +19,9 @@ patched_versions:
   - ">= 4.2.0.beta2"
 related:
   url:
-    - https://rubyonrails.org/2014/9/29/Rails-4-2-0-beta2-has-been-released
     - https://advisories.gitlab.com/pkg/gem/activejob/OSVDB-112347
+    - https://rubyonrails.org/2014/9/29/Rails-4-2-0-beta2-has-been-released
+    - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activejob/OSVDB-112347.yml
+    - https://github.com/advisories/GHSA-mpwp-4h2m-765c
 notes: |
-  - No CVE, GHSA, or CVSS values
+  - No CVE or CVSS values.

…tiverecord-jdbc-adapter/OSVDB-114854.yml …ord-jdbc-adapter/GHSA-5qw5-wf2q-f538.ymlgems/activerecord-jdbc-adapter/OSVDB-114854.yml renamed to gems/activerecord-jdbc-adapter/GHSA-5qw5-wf2q-f538.yml gems/activerecord-jdbc-adapter/OSVDB-114854.yml renamed to gems/activerecord-jdbc-adapter/GHSA-5qw5-wf2q-f538.yml

@@ -2,10 +2,10 @@
 gem: activerecord-jdbc-adapter
 platform: jruby
 osvdb: 114854
-url: https://github.com/jruby/activerecord-jdbc-adapter/issues/322
-title:
-  ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb sql.gsub()
-  Function SQL Injection
+ghsa: 5qw5-wf2q-f538
+url: https://github.com/advisories/GHSA-5qw5-wf2q-f538
+title: ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb
+  sql.gsub() Function SQL Injection
 date: 2013-02-25
 description: |
   ActiveRecord-JDBC-Adapter (AR-JDBC) contains a flaw that may allow carrying
@@ -22,7 +22,8 @@ related:
   url:
     - https://github.com/jruby/activerecord-jdbc-adapter/issues/322
     - https://github.com/jruby/activerecord-jdbc-adapter/blob/master/lib/arjdbc/jdbc/adapter.rb
-    - https://security.snyk.io/vuln/SNYK-RUBY-ACTIVERECORDJDBCADAPTER-20076
     - https://my.diffend.io/gems/activerecord-jdbc-adapter/1.2.5/1.2.8
-    - http://osvdb.org/show/osvdb/114854
-    - https://advisories.gitlab.com/pkg/gem/activerecord-jdbc-adapter/OSVDB-2013-02-25
+    - https://security.snyk.io/vuln/SNYK-RUBY-ACTIVERECORDJDBCADAPTER-20076
+    - https://github.com/advisories/GHSA-5qw5-wf2q-f538
+notes: |
+  - No CVE, CVSS values.