[Bug 2080939] Re: Update dotnet-sdk-8.0 package to version 8.0.400

[Mateus Rodrigues de Morais]

Hi thibault, thank you for reaching out. The current version of the .NET
SDK available on the Ubuntu archive is .NET SDK 8.0.108, which was
released on August 13th 2024 in parallel with 8.0.304 and 8.0.400 and
includes all of the latest security patches available (see [0]).

This relates to something called "feature bands" (see [1]). On Ubuntu,
we only ship .NET versions that can be built from source. For .NET 8,
only the 8.0.1xx feature band can be built from source, so we can't ship
any feature bands higher than that.

This, by no means, translates into customers getting a "worse" version
of the product. These feature bands were primarily created to allow for
the parallel shipping of breaking changes to some SDK components, like
NuGet or MSBuild, to align with new Visual Studio releases.

Also, the .NET team at Canonical is hard at work making sure that the
latest .NET versions are shipped as quickly as possible to users and,
whenever the release includes a security patch, it is always made
available at the same time as Microsoft's own releases, generally on
Patch Tuesday (second Tuesday of the month).

[0] https://versionsof.net/core/8.0/8.0.8/
[1] https://learn.microsoft.com/en-us/dotnet/core/releases-and-support#feature-bands-sdk-only

** Changed in: dotnet8 (Ubuntu)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dotnet8 in Ubuntu.
https://bugs.launchpad.net/bugs/2080939

Title:
  Update dotnet-sdk-8.0 package to version 8.0.400

Status in dotnet8 package in Ubuntu:
  Won't Fix

Bug description:
  Hi,

  I agree that the dotnet 8.0 sdk should remain on version 8.0. But
  currently the version is locked in at 8.0.100. Could we consider
  bumping the version to 8.0.400 to include recent security patches?
  Since Microsoft doesn't publish their versions
  (https://packages.microsoft.com/ubuntu/24.04/prod/pool/main/d/) this
  is the only way to update the sdk through apt (snap and install.sh
  script aside).

  Kind regards

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dotnet8/+bug/2080939/+subscriptions