···

       
25
       
25
       
 
       


     

       
26
       
26
       
 
       
      enable = mkOption {

     

       
27
       
27
       
 
       
        default = false;

     

       
28
       
28
       
-
       
        description = "Whether to enable jboss";

     

       
28
       
28
       
+
       
        description = "Whether to enable JBoss. WARNING : this package is outdated and is known to have vulnerabilities.";

     

       
29
       
29
       
 
       
      };

     

       
30
       
30
       
 
       


     

       
31
       
31
       
 
       
      tempDir = mkOption {

     

···

       
22
       
22
       
 
       
    license = licenses.lgpl21;

     

       
23
       
23
       
 
       
    maintainers = [ maintainers.sander ];

     

       
24
       
24
       
 
       
    platforms = platforms.unix;

     

       
25
       
25
       
+
       
    knownVulnerabilities = [

     

       
26
       
26
       
+
       
      "CVE-2015-7501: remote code execution in apache-commons-collections: InvokerTransformer during deserialisation"

     

       
27
       
27
       
+
       
    ];

     

       
25
       
28
       
 
       
  };

     

       
26
       
29
       
 
       
}