Since Buildroot commit [1] the CVEs are no longer matched to CPEs with versions using '-'. These IGNORE_CVES entry introduced in [2] is then no longer matched to the cmake package. For more information, see the explanation in commit [1]. [1]35f376d88esupport/scripts/cve.py: fix CPE matching [2]5ce1e773b9package/cmake: ignore CVE-2016-10642 Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit ac47f65186d775ae98fda7429e007ff59e278c51) Signed-off-by: Thomas Perale <thomas.perale@mind.be>