oraclejdk_*: mark insecure and not updated (#353034)

This commit is contained in:
Emily 2024-11-02 01:31:47 +00:00 committed by GitHub
commit 528225f2d0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -185,6 +185,9 @@ let result = stdenv.mkDerivation rec {
license = licenses.unfree;
platforms = [ "i686-linux" "x86_64-linux" "armv7l-linux" "aarch64-linux" ]; # some inherit jre.meta.platforms
mainProgram = "java";
knownVulnerabilities = [
"The Oracle JDKs included with Nixpkgs have not been updated since 2021. They contain many known vulnerabilities (https://openjdk.org/groups/vulnerability/advisories/). OpenJDK provides a comparable alternative."
];
};
}; in result