Add OSVDB-131677 for mail ruby gem

Fixes rubysec#215.

gems/mail/OSVDB-131677.yml

@@ -0,0 +1,24 @@
+---
+gem: mail
+osvdb: 131677
+url: http://www.mbsd.jp/Whitepaper/smtpi.pdf
+title: Mail Gem for Ruby SMTP Injection via recipient email addresses
+date: 2015-12-09
+
+description: |
+  Mail Gem for Ruby is vulnerable to the recipient attack described in Takeshi
+  Terada's "SMTP Injection via recipient email addresses" whitepaper
+  (http://www.mbsd.jp/Whitepaper/smtpi.pdf), as it does not validate nor
+  sanitize given recipient addresses. Thus, the attacks described in the paper
+  can be applied to the library without any modification.
+
+  [email protected]>[CRLF]DATA[CRLF](message content)[CRLF].[CRLF]QUIT[CRLF]
+
+  The Mail library itself does not impose a length limit on email addresses,
+  so an attacker can send a long spam message via a recipient address unless
+  there is a limit on the application's side.
+
+  This vulnerability affects only applications that lack input validation.
+
+patched_versions:
+- ">= 2.6.0"