Public bug reported:

The `dotnet sdk check` command queries a JSON file in a URL that
contains all published .NET versions for a given Ubuntu release to alert
the user whenever a .NET update is available, if their installed version
is less than the latest available version in the JSON file.

For Canonical builds, this URL is
https://raw.githubusercontent.com/canonical/dotnet-release-file-
generator/refs/heads/release/$release/releases-index.json, where
$release can be stonking, resolute, noble, and so on. During package
build, $release is replaced by the distribution value in the changelog,
and the URL is placed in sdk/$version/sdk-check-config.json.

For security releases, the distribution field in the changelog has
-security appended to it, and that suffix gets added to this URL,
resulting in an HTTP 404 result whenever one tries `dotnet sdk check`.
Therefore, there should be a check in the code to make sure only the
actual release name makes it to the URL.

** Affects: dotnet10 (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: dotnet8 (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: dotnet9 (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: dotnet10 (Ubuntu Jammy)
     Importance: Undecided
         Status: Invalid

** Affects: dotnet8 (Ubuntu Jammy)
     Importance: Undecided
         Status: New

** Affects: dotnet9 (Ubuntu Jammy)
     Importance: Undecided
         Status: Invalid

** Affects: dotnet10 (Ubuntu Noble)
     Importance: Undecided
         Status: New

** Affects: dotnet8 (Ubuntu Noble)
     Importance: Undecided
         Status: New

** Affects: dotnet9 (Ubuntu Noble)
     Importance: Undecided
         Status: Invalid

** Affects: dotnet10 (Ubuntu Questing)
     Importance: Undecided
         Status: New

** Affects: dotnet8 (Ubuntu Questing)
     Importance: Undecided
         Status: New

** Affects: dotnet9 (Ubuntu Questing)
     Importance: Undecided
         Status: New

** Affects: dotnet10 (Ubuntu Resolute)
     Importance: Undecided
         Status: New

** Affects: dotnet8 (Ubuntu Resolute)
     Importance: Undecided
         Status: New

** Affects: dotnet9 (Ubuntu Resolute)
     Importance: Undecided
         Status: Invalid

** Affects: dotnet10 (Ubuntu Stonking)
     Importance: Undecided
         Status: New

** Affects: dotnet8 (Ubuntu Stonking)
     Importance: Undecided
         Status: Invalid

** Affects: dotnet9 (Ubuntu Stonking)
     Importance: Undecided
         Status: Invalid

** Also affects: dotnet8 (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: dotnet9 (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: dotnet8 (Ubuntu Questing)
   Importance: Undecided
       Status: New

** Also affects: dotnet9 (Ubuntu Questing)
   Importance: Undecided
       Status: New

** Also affects: dotnet10 (Ubuntu Questing)
   Importance: Undecided
       Status: New

** Also affects: dotnet8 (Ubuntu Resolute)
   Importance: Undecided
       Status: New

** Also affects: dotnet9 (Ubuntu Resolute)
   Importance: Undecided
       Status: New

** Also affects: dotnet10 (Ubuntu Resolute)
   Importance: Undecided
       Status: New

** Also affects: dotnet8 (Ubuntu Stonking)
   Importance: Undecided
       Status: New

** Also affects: dotnet9 (Ubuntu Stonking)
   Importance: Undecided
       Status: New

** Also affects: dotnet10 (Ubuntu Stonking)
   Importance: Undecided
       Status: New

** Also affects: dotnet8 (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: dotnet9 (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: dotnet10 (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: dotnet8 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: dotnet9 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: dotnet10 (Ubuntu Jammy)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2156464

Title:
  `dotnet sdk check` releases URL is malformed

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dotnet10/+bug/2156464/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to