From dffd1008156cb1adf8919cc49dafdc89b3c57c3e Mon Sep 17 00:00:00 2001
From: rorosen <robert.rose@mailbox.org>
Date: Wed, 2 Sep 2026 22:30:54 +0200
Subject: [PATCH] k3s_1_33: mark as vulnerable due to EOL

EOL on 2026-06-28

Not-cherry-picked-because: Package is removed on unstable
---
 pkgs/applications/networking/cluster/k3s/default.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/applications/networking/cluster/k3s/default.nix b/pkgs/applications/networking/cluster/k3s/default.nix
index fafe11745677..378edac6db29 100644
--- a/pkgs/applications/networking/cluster/k3s/default.nix
+++ b/pkgs/applications/networking/cluster/k3s/default.nix
@@ -12,7 +12,9 @@ let
   extraArgs = removeAttrs args [ "callPackage" ];
 in
 {
-  k3s_1_33 = common (import ./1_33/versions.nix) extraArgs;
+  k3s_1_33 = (common (import ./1_33/versions.nix) extraArgs).overrideAttrs {
+    meta.knownVulnerabilities = [ "k3s_1_33 has reached end-of-life on 2026-06-28" ];
+  };
 
   k3s_1_34 = (common (import ./1_34/versions.nix) extraArgs).overrideAttrs {
     patches = [ ./go_runc_require.patch ];