From a50de591409d9e85449118ce4a704b61281e2b8a Mon Sep 17 00:00:00 2001
From: Tomo <tomodachi94@protonmail.com>
Date: Sat, 2 Nov 2024 00:54:46 +0000
Subject: [PATCH] oraclejdk_*: mark insecure and not updated

https://openjdk.org/groups/vulnerability/advisories/
---
 pkgs/development/compilers/oraclejdk/jdk-linux-base.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/development/compilers/oraclejdk/jdk-linux-base.nix b/pkgs/development/compilers/oraclejdk/jdk-linux-base.nix
index d03419e96570..05045f9bccd2 100644
--- a/pkgs/development/compilers/oraclejdk/jdk-linux-base.nix
+++ b/pkgs/development/compilers/oraclejdk/jdk-linux-base.nix
@@ -185,6 +185,9 @@ let result = stdenv.mkDerivation rec {
     license = licenses.unfree;
     platforms = [ "i686-linux" "x86_64-linux" "armv7l-linux" "aarch64-linux" ]; # some inherit jre.meta.platforms
     mainProgram = "java";
+    knownVulnerabilities = [
+      "The Oracle JDKs included with Nixpkgs have not been updated since 2021. They contain many known vulnerabilities (https://openjdk.org/groups/vulnerability/advisories/). OpenJDK provides a comparable alternative."
+    ];
   };
 
 }; in result