From 4ce67e9dabbe7d4ba5f00ecc0a66a53eb3a0070d Mon Sep 17 00:00:00 2001
From: rorosen <robert.rose@mailbox.org>
Date: Tue, 15 Sep 2026 23:12:13 +0200
Subject: [PATCH] rke2_1_33: mark as vulnerable due to EOL

EOL on 2026-06-28

Not-cherry-picked-because: Package is removed on unstable
---
 pkgs/applications/networking/cluster/rke2/default.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/applications/networking/cluster/rke2/default.nix b/pkgs/applications/networking/cluster/rke2/default.nix
index a76456652e5d..3c18bf06b6d8 100644
--- a/pkgs/applications/networking/cluster/rke2/default.nix
+++ b/pkgs/applications/networking/cluster/rke2/default.nix
@@ -5,7 +5,9 @@ let
   extraArgs = removeAttrs args [ "callPackage" ];
 in
 rec {
-  rke2_1_33 = common (import ./1_33/versions.nix) extraArgs;
+  rke2_1_33 = (common (import ./1_33/versions.nix) extraArgs).overrideAttrs {
+    meta.knownVulnerabilities = [ "rke2_1_33 has reached end-of-life on 2026-06-28" ];
+  };
 
   rke2_1_34 = common (import ./1_34/versions.nix) extraArgs;