[Debian-astro-maintainers] Bug#876829: "pkg-config --libs cfitsio" contains -lcurl but no dependency on libcurl4-gnutls-dev

[Adrian Bunk]

Package: libcfitsio-dev
Version: 3.420-2
Severity: serious
Control: affects -1 src:python-astropy src:gyoto src:vips

https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/python-astropy.html

...
creating build/temp.linux-x86_64-2.7/astropy/io/fits
creating build/temp.linux-x86_64-2.7/astropy/io/fits/src
x86_64-linux-gnu-gcc -pthread -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -fno-strict-aliasing -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC -I/usr/lib/python2.7/dist-packages/numpy/core/include -I/usr/include/python2.7 -c astropy/io/fits/src/compressionmodule.c -o build/temp.linux-x86_64-2.7/astropy/io/fits/src/compressionmodule.o
x86_64-linux-gnu-gcc -pthread -shared -Wl,-O1 -Wl,-Bsymbolic-functions -Wl,-z,relro -fno-strict-aliasing -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -Wdate-time -D_FORTIFY_SOURCE=2 -g -fdebug-prefix-map=/build/python2.7-VlMpWk/python2.7-2.7.14=. -fstack-protector-strong -Wformat -Werror=format-security -Wl,-z,relro -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 build/temp.linux-x86_64-2.7/astropy/io/fits/src/compressionmodule.o -lcfitsio -lpthread -lcurl -o build/lib.linux-x86_64-2.7/astropy/io/fits/compression.so
/usr/bin/ld: cannot find -lcurl
collect2: error: ld returned 1 exit status
error: command 'x86_64-linux-gnu-gcc' failed with exit status 1
debian/rules:20: recipe for target 'build-python2.7' failed
make[1]: *** [build-python2.7] Error 1


Root cause:

$ pkg-config --libs cfitsio
-lcfitsio -lpthread -lcurl  
$ 

Either the -lcurl should not be there or libcfitsio-dev
must depend on libcurl4-gnutls-dev.