oraclejdk_*: mark insecure and not updated

https://openjdk.org/groups/vulnerability/advisories/
(cherry picked from commit a50de59140)
This commit is contained in:
Tomo 2024-11-02 00:54:46 +00:00 committed by github-actions[bot]
parent acc2a23c96
commit 26b6d7729d

View File

@ -185,6 +185,9 @@ let result = stdenv.mkDerivation rec {
license = licenses.unfree;
platforms = [ "i686-linux" "x86_64-linux" "armv7l-linux" "aarch64-linux" ]; # some inherit jre.meta.platforms
mainProgram = "java";
knownVulnerabilities = [
"The Oracle JDKs included with Nixpkgs have not been updated since 2021. They contain many known vulnerabilities (https://openjdk.org/groups/vulnerability/advisories/). OpenJDK provides a comparable alternative."
];
};
}; in result