Update msftidy for the new CVE format

https://cve.mitre.org/cve/identifiers/syntaxchange.html

Author: wvu

tools/msftidy.rb

@@ -176,7 +176,7 @@ def check_ref_identifiers
 
         case identifier
         when 'CVE'
-          warn("Invalid CVE format: '#{value}'") if value !~ /^\d{4}\-\d{4}$/
+          warn("Invalid CVE format: '#{value}'") if value !~ /^\d{4}\-\d{4,}$/
         when 'OSVDB'
           warn("Invalid OSVDB format: '#{value}'") if value !~ /^\d+$/
         when 'BID'