Re: Requests-2.32.4 upgrade - BLFS r12.3-937

On 6/26/25 4:41 PM, Rainer Fiebig ([email protected] via blfs-support 
Mailing List) wrote:
> Am 26.06.25 um 20:50 schrieb Pierre Labastie ([email protected]
> via blfs-support Mailing List):
>> On Thu, 2025-06-26 at 12:58 -0500, Vivaldi wrote:
>>> On 6/25/25 5:53 PM, Joe Locash ([email protected] via blfs-support
>>> Mailing List) wrote:
>>>> On 6/25/25 6:15 PM, Vivaldi ([email protected] via
>>>> blfs-support Mailing List) wrote:
>>>>> I upgraded requests to 2.32.4 as suggested by the recent security
>>>>> advisory.  Compiling seemed to go well but I don't see
>>>>> /usr/lib/python3.13/site-packages/requests-2.32.4.dist-info as
>>>>> listed
>>>>> in the documentation.  I still have
>>>>> /usr/lib/python3.13/site-packages/requests-2.32.3.dist-info.
>>>>>
>>>>> I see "Requirement already satisfied: requests in
>>>>> /usr/lib/python3.13/site-packages (2.32.3)" when compiling and
>>>>> the
>>>>> instructions seem unchanged from 2.32.3.  Have I missed something
>>>>> to
>>>>> force the update?
>>>> Try adding --ignore-installed when installing with pip3.
>>>>
>>>>
>>> You mean pip3 install --ignore-installed --no-index --find-links dist
>>> --no-user requests?
>>>
>>> Using the above I receive:
>>>
>>>      INFO: pip is looking at multiple versions of requests to
>>> determine which version is compatible with other requirements. This
>>> could take a while.
>>>      ERROR: Could not find a version that satisfies the requirement
>>> charset_normalizer<4,>=2 (from requests) (from versions: none)
>>>      ERROR: No matching distribution found for
>>> charset_normalizer<4,>=2
>>>
>>> I see /usr/lib/python3.13/site-packages/charset_normalizer and
>>> charset_normalizer-3.4.1.dist-into.
>>>
>>>
>> Could you please read "Command Explanations" paragraph?
> It's also explained in "Important" at the beginning of ch. "Python
> Modules".  BUT in my book the OP is completely exonerated:  the idea of
> having to use extra options just to update or reinstall itsy-bitsy
> pieces of software is so unusual and so weird that any sane mind may be
> fooled by it.
>
> Rainer
>
>
I agree, Python seems quirky to me with this.  Needing --upgrade seems 
unnecessary if compiling a newer version.  What else would I be doing?

Regardless, I added --upgrade to my scripts (for installing and 
upgrading).  It's needed to upgrade but I tested it with new modules 
which seemed to install well.

The documentation doesn't use 'pip3 install --upgrade --no-index 
--find-links dist --no-user requests' and I believe I understand as it 
displays commands necessary for installation.  We'd be telling a user to 
issue a switch unnecessary for installation.

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-support
Unsubscribe: See the above information page