openembedded/meta-openembedded

Nodejs: deps folder is deleting from source while do_unpack

Opened this issue · 1 comments

Hi,

I am working Nodejs security fixes, all these fixes will be done on deps/openssl folder but openssl folder is not available in Nodejs source code it is deleting while source unpack.
Could any one please tell how can I apply security patches in deps/openssl.

Ex : CVE-2022-32222
https://security-tracker.debian.org/tracker/CVE-2022-32222
nodejs/node@a5fc2de

To fix this CVE I have to backport these commit changes to Nodejs v16 and fix path location is deps/openssl/openssl_common.gypi, but deps/openssl is itself deleting while unapck and I can not apply this patch .

Could any one please explain why deps folder is deleting while unpack and how I apply apply this CVE fix patch.

kraj commented

its using system openssl, can you check openssl recipe for these CVEs