[Debian-med-packaging] Bug#845505: sra-sdk 2.7.0-1 is broken libncbi-vdb2 2.8.0+dfsg-1

[Andreas Tille]

Hi Charles,

On Thu, Nov 24, 2016 at 01:38:11PM +0900, Charles Plessy wrote:
> Package: sra-sdk
> Severity: grave
> 
> Hi all,
> 
> quick note from work; sorry to not being able to go deeper.
> 
> A colleague has reported to me that sra-sdk 2.7.0-1 is broken
> libncbi-vdb2 2.8.0+dfsg-1.  For instance:
> 
> fastq-dump
> fastq-dump: symbol lookup error:
> /usr/lib/x86_64-linux-gnu/libncbi-vdb.so.2: undefined symbol:
> mbedtls_ctr_drbg_seed
> 
> Downgrading libncbi-vdb2 to 2.7.0+dfsg-4~bpo8+1.
> 
> There are no build logs for sra-sdk on amd64, but I guess that sra-sdk
> 2.7.0-1 could have been built against 2.7.0+dfsg-4 by mistake (given
> that they have been uploaded on the same day, I assume that they were
> intended to be used together).  Note that now, with source-only uploads,
> it is easier to get build logs.
> 
> If we are lucky, maybe a binNMU will be enough ?  On the other hand,
> maybe the only way to prevent problems for the users upgrading form
> Testing would be to tighten the dependency.

I tried hard to get sra-sdk 2.8.0 packaged - but as always this is quite
a time draining job since with every release upstream changes the build
system.  I would really appreciate any help to get sra-sdk 2.8.0 out
since this might be the more sustainable solution that fiddling around
with the old version.

Any volunteers?

Kind regards

        Andreas.

-- 
http://fam-tille.de