nodejs: fix CVE_PRODUCT

The CVE_PRODUCT is set with a weak default assignment in the cve-check.bbclass,
which means that when the recipe uses +=, it overrides the original weak adefault
value instead of appending to it.

Set all applicable values in CVE_PRODUCT variable explicitly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
Gyorgy Sarvari
2025-12-22 15:53:52 +01:00
parent 3b6d6286c7
commit d2894888c9
@@ -44,7 +44,7 @@ SRC_URI[sha256sum] = "576f1a03c455e491a8d132b587eb6b3b84651fc8974bb3638433dd44d2
S = "${WORKDIR}/node-v${PV}"
CVE_PRODUCT += "node.js"
CVE_PRODUCT = "nodejs node.js"
# v8 errors out if you have set CCACHE
CCACHE = ""