Looking throught sys-kernel, there are some rather old kernel, kernel's who's vanilla versions at least had some serious exploits. Anyhow, this bug is to poke kernel maintainers to look at their *-sources and decide whether they should still be in the tree. I'm going to cc all kernel maintainers for completeness, but this may not be relevant at all for you. Just remove yourself from the CC.
The sources that got my wondering about aging kernels were Jan 23 2007 sparc-sources-2.4.34.ebuild Jan 1 2007 xbox-sources-2.6.16.26.ebuild Mar 23 2008 cell-sources-2.6.24-r1.ebuild
I would like to add a vote for mm-sources, as it is no longer supported by Andrew Morton afaict. http://en.wikipedia.org/wiki/Mm_tree
mips-sources is still maintained; I've just been tied up lately and haven't rollowed a new release yet.
pf-sources: We actively maintain them and remove old versions from time to time zen-sources: They no longer release patches so we are "forced" to keep old kernels around. The only ebuild that make sense is the -9999 one. We will probably remove the old ebuilds sometime in the near future
sys-kernel/linux-firmware is still maintained. If there are any exploits known against sourceless firmware, it will be difficult or impossible to fix them. Probably the firmware file in question would have to be dropped.
cluster-sources can be dropped since 3.2+ kernels supports XRC
sparc-sources was removed 2 months ago, sparc done here
Are we done with this?
There doesn't seem much more removable left from a scan over the *-sources list.
(In reply to Tom Wijsman (TomWij) from comment #9) > There doesn't seem much more removable left from a scan over the *-sources > list. Okay. I think we're done with this. I don't see anything before 2013.