[Python-modules-team] Bug#766419: python3-requests: Version 2.4 of python-requests / python3-requests breaks virtualenv.

[Nicolas CANIART]

Package: python3-requests
Version: 2.4.3-1
Severity: critical
Justification: breaks unrelated software

Dear Maintainer,


The new version of python3-requests/python-requests (2.4.3) breaks
pip which in turn breaks virtualenv (see bug #766261).

The request.compat module used to export a IncompleteRead
module which virtualenv uses. But this symbol is no longer defined there
and thus any package relying on it is prone to break.

Temporarily removing this package from unstable or uploading a version
of the package that is patched so it exports the symbol in question
again, seems advisable considering the amount of reverse dependency
this package has (a quick grep in /usr/lib/python3/dist-package show
no other package on my system but I have only a few of those reverse
dependencies installed).

Looking at pip source code on [1], it seems this symbol is no longer
used so you may also want to coordinate with the pip maintainer
(there are no newer release of pip, as of today).

Thanks in advance,
Nicolas.

[1]: https://github.com/pypa/pip  (depends on requests 2.4.1 cached
     in _vendor sub-directory)


-- System Information:
Debian Release: jessie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python3-requests depends on:
ii  ca-certificates  20141019
ii  python3-chardet  2.3.0-1
ii  python3-urllib3  1.9.1-2
pn  python3:any      <none>

python3-requests recommends no packages.

Versions of packages python3-requests suggests:
pn  python3-ndg-httpsclient  <none>
pn  python3-openssl          <none>
ii  python3-pyasn1           0.1.7-1

-- no debconf information