MobSF retrieves a broken python-yara-dex version 1.0.5 instead of latest one #2585
Description
ENVIRONMENT
OS and Version: Arch Linux
Python Version: 3.14
MobSF Version: latest commit
EXPLANATION OF THE ISSUE
While the installation of dependencies by pip, I get:
Processing /usr/share/mobsf
Installing build dependencies: started
Installing build dependencies: finished with status 'done'
Getting requirements to build wheel: started
Getting requirements to build wheel: finished with status 'done'
Preparing metadata (pyproject.toml): started
Preparing metadata (pyproject.toml): finished with status 'done'
Collecting apkid<4.0.0,>=3.0.0 (from mobsf==4.4.5)
Downloading apkid-3.0.0-py2.py3-none-any.whl.metadata (7.9 kB)
Collecting apksigtool<0.2.0,>=0.1.0 (from mobsf==4.4.5)
Downloading apksigtool-0.1.0-py3-none-any.whl.metadata (4.1 kB)
Collecting arpy>=2.3.0 (from mobsf==4.4.5)
Downloading arpy-2.3.0.tar.gz (9.6 kB)
Installing build dependencies: started
Installing build dependencies: finished with status 'done'
Getting requirements to build wheel: started
Getting requirements to build wheel: finished with status 'done'
Preparing metadata (pyproject.toml): started
Preparing metadata (pyproject.toml): finished with status 'done'
Collecting asn1crypto>=1.4.0 (from mobsf==4.4.5)
Downloading asn1crypto-1.5.1-py2.py3-none-any.whl.metadata (13 kB)
Collecting bcrypt==4.0.1 (from mobsf==4.4.5)
Downloading bcrypt-4.0.1-cp36-abi3-manylinux_2_28_x86_64.whl.metadata (9.0 kB)
Collecting bleach<7.0.0,>=6.2.0 (from mobsf==4.4.5)
Downloading bleach-6.3.0-py3-none-any.whl.metadata (31 kB)
Collecting bs4>=0.0.1 (from mobsf==4.4.5)
Downloading bs4-0.0.2-py2.py3-none-any.whl.metadata (411 bytes)
Collecting colorlog>=4.7.2 (from mobsf==4.4.5)
Downloading colorlog-6.10.1-py3-none-any.whl.metadata (11 kB)
Collecting defusedxml<0.8.0,>=0.7.1 (from mobsf==4.4.5)
Downloading defusedxml-0.7.1-py2.py3-none-any.whl.metadata (32 kB)
Collecting distro>=1.5.0 (from mobsf==4.4.5)
Using cached distro-1.9.0-py3-none-any.whl.metadata (6.8 kB)
Collecting django>=3.1.5 (from mobsf==4.4.5)
Downloading django-6.0.1-py3-none-any.whl.metadata (3.9 kB)
Collecting django-q2<2.0.0,>=1.7.4 (from mobsf==4.4.5)
Downloading django_q2-1.9.0-py3-none-any.whl.metadata (9.6 kB)
Collecting django-ratelimit<5.0.0,>=4.1.0 (from mobsf==4.4.5)
Downloading django_ratelimit-4.1.0-py2.py3-none-any.whl.metadata (2.3 kB)
Collecting frida>=17.0.0 (from mobsf==4.4.5)
Downloading frida-17.6.2-cp37-abi3-manylinux_2_5_x86_64.whl.metadata (2.3 kB)
Collecting frida-tools<15.0.0,>=14.3.0 (from mobsf==4.4.5)
Downloading frida_tools-14.5.1.tar.gz (4.7 MB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 4.7/4.7 MB 32.5 MB/s 0:00:00
Installing build dependencies: started
Installing build dependencies: finished with status 'done'
Getting requirements to build wheel: started
Getting requirements to build wheel: finished with status 'done'
Preparing metadata (pyproject.toml): started
Preparing metadata (pyproject.toml): finished with status 'done'
Collecting google-play-scraper>=0.1.2 (from mobsf==4.4.5)
Downloading google_play_scraper-1.2.7-py3-none-any.whl.metadata (50 kB)
Collecting gunicorn>=20.0.4 (from mobsf==4.4.5)
Downloading gunicorn-25.0.0-py3-none-any.whl.metadata (4.7 kB)
Collecting http-tools>=6.0.0 (from mobsf==4.4.5)
Downloading http_tools-6.0.0.tar.gz (550 kB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 550.4/550.4 kB 8.3 MB/s 0:00:00
Installing build dependencies: started
Installing build dependencies: finished with status 'done'
Getting requirements to build wheel: started
Getting requirements to build wheel: finished with status 'done'
Preparing metadata (pyproject.toml): started
Preparing metadata (pyproject.toml): finished with status 'done'
Collecting ip2location<9.0.0,>=8.10.4 (from mobsf==4.4.5)
Downloading ip2location-8.11.0-py3-none-any.whl.metadata (3.8 kB)
Collecting libsast<4.0.0,>=3.1.6 (from mobsf==4.4.5)
Downloading libsast-3.1.6-py3-none-any.whl.metadata (21 kB)
Collecting lief<0.17.0,>=0.16.6 (from mobsf==4.4.5)
Downloading lief-0.16.7-cp314-cp314-manylinux_2_28_x86_64.whl.metadata (2.4 kB)
Collecting macholib>=1.14 (from mobsf==4.4.5)
Downloading macholib-1.16.4-py2.py3-none-any.whl.metadata (12 kB)
Collecting openstep-parser>=2.0.1 (from mobsf==4.4.5)
Downloading openstep_parser-2.0.3-py3-none-any.whl.metadata (1.7 kB)
Collecting packaging>=24.2 (from mobsf==4.4.5)
Downloading packaging-26.0-py3-none-any.whl.metadata (3.3 kB)
Collecting paramiko<4.0.0,>=3.3.1 (from mobsf==4.4.5)
Downloading paramiko-3.5.1-py3-none-any.whl.metadata (4.6 kB)
Collecting pdfkit>=0.6.1 (from mobsf==4.4.5)
Downloading pdfkit-1.0.0-py3-none-any.whl.metadata (9.3 kB)
Collecting psutil>=5.8.0 (from mobsf==4.4.5)
Downloading psutil-7.2.2-cp36-abi3-manylinux2010_x86_64.manylinux_2_12_x86_64.manylinux_2_28_x86_64.whl.metadata (22 kB)
Collecting psycopg2-binary<3.0.0,>=2.9.10 (from mobsf==4.4.5)
Downloading psycopg2_binary-2.9.11-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl.metadata (4.9 kB)
Collecting python3-saml<2.0.0,>=1.16.0 (from mobsf==4.4.5)
Downloading python3_saml-1.16.0-py3-none-any.whl.metadata (1.3 kB)
Collecting requests>=2.25.1 (from mobsf==4.4.5)
Using cached requests-2.32.5-py3-none-any.whl.metadata (4.9 kB)
Collecting rsa>=4.7 (from mobsf==4.4.5)
Downloading rsa-4.9.1-py3-none-any.whl.metadata (5.6 kB)
Collecting shelljob>=0.6.2 (from mobsf==4.4.5)
Downloading shelljob-0.6.3-py3-none-any.whl.metadata (3.3 kB)
Collecting six>=1.16.0 (from mobsf==4.4.5)
Using cached six-1.17.0-py2.py3-none-any.whl.metadata (1.7 kB)
Collecting svgutils>=0.3.4 (from mobsf==4.4.5)
Downloading svgutils-0.3.4-py3-none-any.whl.metadata (1.1 kB)
Collecting tldextract>=5.1.3 (from mobsf==4.4.5)
Downloading tldextract-5.3.1-py3-none-any.whl.metadata (7.3 kB)
Collecting tzdata<2024.0,>=2023.3 (from mobsf==4.4.5)
Downloading tzdata-2023.4-py2.py3-none-any.whl.metadata (1.4 kB)
Collecting whitenoise>=6.8.2 (from mobsf==4.4.5)
Downloading whitenoise-6.11.0-py3-none-any.whl.metadata (3.7 kB)
Collecting yara-python-dex>=1.0.1 (from apkid<4.0.0,>=3.0.0->mobsf==4.4.5)
Downloading yara-python-dex-1.0.5.tar.gz (259 kB)
Installing build dependencies: started
Installing build dependencies: finished with status 'done'
Getting requirements to build wheel: started
Getting requirements to build wheel: finished with status 'error'
error: subprocess-exited-with-error
× Getting requirements to build wheel did not run successfully.
│ exit code: 1
╰─> [25 lines of output]
<string>:310: DeprecationWarning: codecs.open() is deprecated. Use open() instead.
Traceback (most recent call last):
File "/usr/share/mobsf/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 389, in <module>
main()
~~~~^^
File "/usr/share/mobsf/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 373, in main
json_out["return_val"] = hook(**hook_input["kwargs"])
~~~~^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/share/mobsf/venv/lib/python3.14/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 143, in get_requires_for_build_wheel
return hook(config_settings)
File "/tmp/pip-build-env-5wtsc9pa/overlay/lib/python3.14/site-packages/setuptools/build_meta.py", line 333, in get_requires_for_build_wheel
return self._get_build_requires(config_settings, requirements=[])
~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/tmp/pip-build-env-5wtsc9pa/overlay/lib/python3.14/site-packages/setuptools/build_meta.py", line 301, in _get_build_requires
self.run_setup()
~~~~~~~~~~~~~~^^
File "/tmp/pip-build-env-5wtsc9pa/overlay/lib/python3.14/site-packages/setuptools/build_meta.py", line 518, in run_setup
super().run_setup(setup_script=setup_script)
~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/tmp/pip-build-env-5wtsc9pa/overlay/lib/python3.14/site-packages/setuptools/build_meta.py", line 317, in run_setup
exec(code, locals())
~~~~^^^^^^^^^^^^^^^^
File "<string>", line 310, in <module>
File "<frozen codecs>", line 923, in open
FileNotFoundError: [Errno 2] No such file or directory: 'yara-python/README.rst'
[end of output]
note: This error originates from a subprocess, and is likely not a problem with pip.
[notice] A new release of pip is available: 25.3 -> 26.0
[notice] To update, run: pip install --upgrade pip
ERROR: Failed to build 'yara-python-dex' when getting requirements to build wheel
It retrieves python-yara-dex 1.0.5 instead of latest one on PyPI 1.0.7 (even though on its GitHub source the latest is 1.0.9). Can you also publish the 1.0.9 on PyPI?
STEPS TO REPRODUCE THE ISSUE
- In Arch Linux, clone the MobSF repository
- Run:
python -m venv venv source venv/bin/activate && pip install --isolated --root="/usr/share/mobsf" --prefix='venv' .