Test the last sorted condition (rather than any) for open endedness

gems/actionpack/CVE-2016-2097.yml

@@ -87,4 +87,5 @@ unaffected_versions:
 
 patched_versions:
   - "~> 3.2.22.2"
-  - "~> 4.1.14, >= 4.1.14.2"
+  - "~> 4.1.14"
+  - ">= 4.1.14.2"

gems/actionpack/OSVDB-103440.yml

@@ -16,7 +16,7 @@ description: |
 cvss_v2: 5.0
 
 unaffected_versions:
-  - ~> 4.0.0
+  - ">= 4.0.0"
 
 patched_versions:
   - ">= 3.2.17"

spec/gem_example.rb

@@ -23,11 +23,13 @@
         unaffected_versions = advisory['unaffected_versions'] || []
         patched_versions    = advisory['patched_versions'] || []
 
-        versions  = unaffected_versions + patched_versions
+        versions = (unaffected_versions + patched_versions).sort_by do |v|
+          Gem::Version.new(v.match(/[0-9.]+\.\d+/)[0])
+        end
 
         # If a gem is unpatched this test makes no sense
         unless patched_versions.none?
-          expect(versions.any? { |version| version.match(/^>=|^>/)}).to be_truthy
+          expect(versions.last.match(/^>=|^>/)).to be_truthy
         end
       end
     end