[Debian-med-packaging] Bug#845505: sra-sdk 2.7.0-1 is broken libncbi-vdb2 2.8.0+dfsg-1

[Charles Plessy]

Package: sra-sdk
Severity: grave

Hi all,

quick note from work; sorry to not being able to go deeper.

A colleague has reported to me that sra-sdk 2.7.0-1 is broken
libncbi-vdb2 2.8.0+dfsg-1.  For instance:

fastq-dump
fastq-dump: symbol lookup error:
/usr/lib/x86_64-linux-gnu/libncbi-vdb.so.2: undefined symbol:
mbedtls_ctr_drbg_seed

Downgrading libncbi-vdb2 to 2.7.0+dfsg-4~bpo8+1.

There are no build logs for sra-sdk on amd64, but I guess that sra-sdk
2.7.0-1 could have been built against 2.7.0+dfsg-4 by mistake (given
that they have been uploaded on the same day, I assume that they were
intended to be used together).  Note that now, with source-only uploads,
it is easier to get build logs.

If we are lucky, maybe a binNMU will be enough ?  On the other hand,
maybe the only way to prevent problems for the users upgrading form
Testing would be to tighten the dependency.

Have a nice day,

-- 
Charles