Re: Requests-2.32.4 upgrade - BLFS r12.3-937

"Bruce Dubbs" ([email protected] via blfs-support Mailing List) <[email protected]>
Newsgroups gmane.linux.lfs.beyond.support
Message-ID <[email protected]>
On 6/30/25 4:37 PM, Vivaldi ([email protected] via blfs-support Mailing List) 
wrote:
> 
> On 6/26/25 4:41 PM, Rainer Fiebig ([email protected] via blfs-support Mailing List) wrote:
>> Am 26.06.25 um 20:50 schrieb Pierre Labastie ([email protected]
>> via blfs-support Mailing List):
>>> On Thu, 2025-06-26 at 12:58 -0500, Vivaldi wrote:
>>>> On 6/25/25 5:53 PM, Joe Locash ([email protected] via blfs-support
>>>> Mailing List) wrote:
>>>>> On 6/25/25 6:15 PM, Vivaldi ([email protected] via
>>>>> blfs-support Mailing List) wrote:
>>>>>> I upgraded requests to 2.32.4 as suggested by the recent security
>>>>>> advisory.  Compiling seemed to go well but I don't see
>>>>>> /usr/lib/python3.13/site-packages/requests-2.32.4.dist-info as
>>>>>> listed
>>>>>> in the documentation.  I still have
>>>>>> /usr/lib/python3.13/site-packages/requests-2.32.3.dist-info.
>>>>>>
>>>>>> I see "Requirement already satisfied: requests in
>>>>>> /usr/lib/python3.13/site-packages (2.32.3)" when compiling and
>>>>>> the
>>>>>> instructions seem unchanged from 2.32.3.  Have I missed something
>>>>>> to
>>>>>> force the update?
>>>>> Try adding --ignore-installed when installing with pip3.
>>>>>
>>>>>
>>>> You mean pip3 install --ignore-installed --no-index --find-links dist
>>>> --no-user requests?
>>>>
>>>> Using the above I receive:
>>>>
>>>>      INFO: pip is looking at multiple versions of requests to
>>>> determine which version is compatible with other requirements. This
>>>> could take a while.
>>>>      ERROR: Could not find a version that satisfies the requirement
>>>> charset_normalizer<4,>=2 (from requests) (from versions: none)
>>>>      ERROR: No matching distribution found for
>>>> charset_normalizer<4,>=2
>>>>
>>>> I see /usr/lib/python3.13/site-packages/charset_normalizer and
>>>> charset_normalizer-3.4.1.dist-into.
>>>>
>>>>
>>> Could you please read "Command Explanations" paragraph?
>> It's also explained in "Important" at the beginning of ch. "Python
>> Modules".  BUT in my book the OP is completely exonerated:  the idea of
>> having to use extra options just to update or reinstall itsy-bitsy
>> pieces of software is so unusual and so weird that any sane mind may be
>> fooled by it.
>>
>> Rainer
>>
>>
> I agree, Python seems quirky to me with this.  Needing --upgrade seems unnecessary if 
> compiling a newer version.  What else would I be doing?
> 
> Regardless, I added --upgrade to my scripts (for installing and upgrading).  It's 
> needed to upgrade but I tested it with new modules which seemed to install well.
> 
> The documentation doesn't use 'pip3 install --upgrade --no-index --find-links dist -- 
> no-user requests' and I believe I understand as it displays commands necessary for 
> installation.  We'd be telling a user to issue a switch unnecessary for installation.

Yes, the need for --upgrade seems out of place, but note that there is also the
--force-reinstall option that may be needed at times.  I'm not sure, but it may be 
needed for downgrading.  Most of this is, I think, due to Python being fairly 
sensitive to module versions.

   -- Bruce

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-support
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.