microsoft / azurelinux

Linux OS for Azure 1P services and edge appliances
MIT License
4.08k stars 497 forks source link

Fix python-gevent missing dependencies, broken tests, and CVE-2024-24806 #9549

Open nisamson opened 2 days ago

nisamson commented 2 days ago
Merge Checklist

All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)


Summary

This PR makes several fixes to python-gevent. Previously, ptests were not running because they could not possibly run on 3.12. Additionally, the spec was not using the pyproject build process. Finally, the package was previously upgraded, but one of its core dependencies was not added to Azure Linux.

Several tests are either inherently flaky or were reliant on networking configuration assumptions which are not valid in our build process. These have been disabled via patch.

Finally, a patch was added for CVE-2024-24806 in the embedded version of libuv included in the project source.

Change Log
Does this affect the toolchain?

NO

Links to CVEs
Test Methodology