commit 20f4035532b3db236a97aae01cc219172fcff2b6
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Fri Sep 11 10:46:10 2026 +0200

sys-kernel/pf-sources-extended: trim 6.19_p5 comments

commit d2cb333963fa8a5d551b2860006c348d68d0ccf7
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 05:41:59 2026 +0200

sys-kernel/pf-sources-extended: trim 6.15_p6 comment prose

commit 05a7cf67adff32795df4c3cb5f061c491e5556db
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 05:33:33 2026 +0200

sys-kernel/pf-sources-extended: trim 6.17_p4 comment prose

commit bc7adb342c3b2af2ea2f79634e670537914ad7d6
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 05:26:27 2026 +0200

sys-kernel/pf-sources-extended: trim 6.16_p5 comment prose

commit 9e8906fba3ad3ed7a1817d99e3703b3a403610c8
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 05:01:29 2026 +0200

sys-kernel/pf-sources-extended: trim 6.8_p9 comment prose

commit 8f6f655c3d444bb57be3a3faf04c675c566a2f5e
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 04:34:45 2026 +0200

sys-kernel/pf-sources-extended: trim 6.10_p4 comment prose

commit 4f9bc23e6497ecfe9714a2b4b25c32b0d07a2a45
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 04:08:29 2026 +0200

sys-kernel/pf-sources-extended: trim 6.9_p6 comment prose

commit 5898134e22b022e5f7612187a3319c3d99f2837f
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 03:56:18 2026 +0200

sys-kernel/pf-sources-extended: trim 6.7_p7 comment prose

commit 4b3e572e0f973b2a34e3ab4d7d605d693900a797
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 03:47:49 2026 +0200

sys-kernel/pf-sources-extended: trim 6.4_p6 comment prose

commit acb314c08686c7da158c9a3ae998d4b772c28d79
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 03:42:30 2026 +0200

sys-kernel/pf-sources-extended: trim 6.11_p4 comment prose

commit bf773f43d33bed997e89f9b6b1a8eb3ab75f9d04
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 03:26:07 2026 +0200

sys-kernel/pf-sources-extended: trim 6.18_p6-r2 comment prose

commit a192df0786fb3fa689d72bd88a24ffe1d1cbe802
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 03:22:36 2026 +0200

sys-kernel/pf-sources-extended: trim 6.13_p6 comment prose

commit 733c0e30d6a5f6fd897a7c835244e8120b880a7d
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 03:21:50 2026 +0200

sys-kernel/pf-sources-extended: trim 6.12_p4-r2 comment prose

commit 0e13ef8532222655fd7c1db31e22a8652d2e1975
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 03:17:13 2026 +0200

sys-kernel/pf-sources-extended: trim 6.14_p6 comment prose

commit 6727eec87ecd4774b1e294f1496267330185d076
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 03:02:07 2026 +0200

sys-kernel/pf-sources-extended: trim 6.6_p6-r2 comment prose

commit cf48845e7e96487330f5db02c2f4f86d4ae59fe8
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 02:55:45 2026 +0200

sys-kernel/pf-sources-extended: trim 6.2_p7 comment prose

commit 1c9ceb0e3770869df8be284b141b5ba5e4823bc0
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 02:55:45 2026 +0200

sys-kernel/pf-sources-extended: trim 6.3_p5 comment prose

commit 3a0d3fc03e9fb7a13088563307ff1e4d690c9cba
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 02:50:42 2026 +0200

sys-kernel/pf-sources-extended: trim 6.1_p6-r2 comment prose

commit 7554ecc8c20033b4a4d8c9d1e8819a9c21cdf891
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Thu Sep 10 02:49:51 2026 +0200

sys-kernel/pf-sources-extended: trim 6.5_p6 comment prose

commit 044635456dcbfa55a97fb9a902b30ed5c9bcb67d
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Wed Sep 9 21:53:40 2026 +0200

sys-kernel/pf-sources-extended: Keyword 6.19_p5 for ~arm64

The remaining curated changes are architecture-neutral, while the
ISA-level build changes are confined to arch/x86.

commit d497e16e787f06f707e87cf27a4cc4b5d2617291
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Wed Sep 9 21:52:41 2026 +0200

sys-kernel/pf-sources-extended: fix 6.19 patch series

The curated archive was authored against a newer base than the fetchable
6.19.12 genpatches stack. Its slab header update lacks matching slub
changes, while its BBRv3 patch assumes TCP core APIs absent from this
base. Revert the partial slab update and omit BBRv3 until the series is
regenerated.

commit a4107728727148774043ae4948f33abcca993ae0
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Sun Aug 16 12:30:34 2026 +0200

sys-kernel/pf-sources-extended: bundle genpatches for 6.6

genpatches-6.6-158 has aged out of every Gentoo genpatches host: the
general pool prunes unreferenced files, the archival host and ~alicef no
longer carry it, and only ~mpagano still served it, so a fresh emerge had
no durable fetch source. Repackage the pinned 6.6-158 base+extras (167
patches, byte-for-byte the Manifest-pinned tarballs) as
pf-genpatches-6.6.tar.xz on extra-stuff and fetch it from there, like the
other bundled pf-sources-extended slots. Drop K_GENPATCHES_VER and
K_WANT_GENPATCHES and eapply the bundle in src_prepare; the applied patch
set and apply order are unchanged.

commit e180c058a5c84ca7330db8f00ea7db89b836d69b
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Sun Aug 16 11:01:16 2026 +0200

sys-kernel/pf-sources-extended: fetch genpatches from the archival host

The genpatches tarballs were fetched from mirror://gentoo, which resolves to the
general distfiles pool and prunes files no longer referenced by an in-tree DIST. The
pinned genpatches-6.6-158 predates the genpatches version current ::gentoo gentoo-
sources use, so it is eligible for pruning there, after which emerge has no fetch
source and no fallback. Switch to the never-pruned archival path
distfiles.gentoo.org/pub/proj/kernel/genpatches/ plus the ~alicef and ~mpagano dist
mirrors, matching kernel-2.eclass's own GENPATCHES_URI.

commit d3b22a796eb587707ce8d1ba6341f1c95e47f130
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Sun Aug 16 03:04:18 2026 +0200

sys-kernel/pf-sources-extended: use Gentoo genpatches mirror

The project-path URL for the retained 6.6 genpatches extras archive returns HTTP 404,
while the exact Manifest-pinned payload remains in Gentoo distfiles. Use the
canonical mirror URI for both archive components.

commit 82d8490c5d27a2bc4ca195a5b4c5a148518f45bd
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Fri Jul 24 13:27:16 2026 +0200

sys-kernel/pf-sources-extended: K bump for 6.1, 6.6, 6.12, 6.18 LTS slots

Curated patches apply cleanly on the newer stable base (verified via
ebuild clean prepare on all four); no curated bundle changes needed.

6.1_p6-r2: K=189->193, linux-stable 6.1.174->6.1.177 (+3 pts)
6.6_p6-r2: K=153->158, linux-stable 6.6.141->6.6.144 (+3 pts)
6.12_p4-r2: K=100->108, linux-stable 6.12.91->6.12.96 (+5 pts)
6.18_p6-r2: K=37->46, linux-stable 6.18.33->6.18.39 (+6 pts)

commit 172895a93b46c608a3082acdaabd96ed7550c6bd
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Sun Jul 5 14:16:59 2026 +0200

sys-kernel/pf-sources-extended: condense maintainer comments and pkg_postinst elog

commit 7bf0dbbe3e6cda373d6416142779172349fd85b6
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Sun May 24 17:25:33 2026 +0200

sys-kernel/pf-sources-extended: document silent reverts on 6.18 slot

The curated bundle's BBR3 (0002) and fixes-misc (0004) patches were
cut against natalenko's pre-stable-backport snapshot. Applying them on
gentoo-sources state silently reverts a handful of K=37 hardening
changes:

- ~7 WRITE_ONCE conversions in net/ipv4/tcp_{output,timer}.c
(snd_ssthresh, data_segs_out, bytes_sent, total_retrans, snd_una,
total_retrans++, timeout_rehash)
- s32/u32 type fix in tcp_clamp_probe0_to_user_timeout
- SKBFL_SHARED_FRAG line drop in tcp_clone_payload
- re-introduction of AS_NO_DATA_INTEGRITY (linux-stable 6.18.21
removed it; no consumers in K=37, dead code)

x86-64 functional impact is essentially KCSAN-cleanliness only.
No fresher pf-kernel BBR3 source for 6.18 exists upstream — pf-6.18
is GA-frozen at v6.18-pf6 and natalenko maintains BBR3 against 7.x
kernels only. Add an elog block flagging this to installers.

commit 36b1061d9631ebb1eb6439b3af68523e0ffc715f
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Sun May 24 14:29:23 2026 +0200

sys-kernel/pf-sources-extended: K bump for 6.1, 6.6, 6.12 LTS slots

No curated bundle changes needed — new stable patches for all three
branches touch no files that the respective curated patchsets modify.
Verified by file-overlap check 2026-05-24.

6.1_p6-r1: K=180→189, linux-stable 6.1.170→6.1.174 (+4 pts)
6.6_p6-r1: K=144→153, linux-stable 6.6.137→6.6.141 (+4 pts)
6.12_p4-r1: K=90→100, linux-stable 6.12.85→6.12.91 (+6 pts)

SRC_URI: add distfiles.gentoo.org as primary genpatches mirror for all
three; alicef prunes old K values. Curated bundle stays at -r70-1.

commit 3768deba5074d418f54b60e5e3b167bbd17b64ae
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Sun May 24 14:28:51 2026 +0200

sys-kernel/pf-sources-extended: add 6.18_p6-r1, drop 6.18_p6

K_GENPATCHES_VER 26 → 37 (linux-stable 6.18.26 → 6.18.33, 7 point
releases). genpatches-6.18-37's 1032_linux-6.18.33.patch changes
tcp_bbr.c, include/linux/tcp.h, tcp_output.c, and tcp_timer.c with
WRITE_ONCE conversions and chrono_type layout changes — all files the
BBR3 curated patch touches. Re-cut 0002-bbr3 against the 6.18.33 base
(extra-stuff pf-curated-6.18-r70-2). Patches 0001/0003-0006 unchanged.

tcp_chrono_set/tcp_chrono_start: 1032 moves these from tcp_output.c to
include/net/tcp.h as static inline; BBR3 re-cut excludes the hunk that
would have re-added them to tcp_output.c (avoids duplicate definition).

SRC_URI now lists distfiles.gentoo.org as primary genpatches mirror;
alicef and mpagano as fallbacks. alicef pruned K=26 and K=37 is only
available via distfiles.gentoo.org. verified 2026-05-24.

commit 5e2bce1a77362accaead750226cc7af8b5aac26b
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Sat May 16 23:06:21 2026 +0200

sys-kernel/pf-sources-extended: rephrase r1/r2 pointer to acknowledge CVE backports

The per-ebuild postinst elog pointed users at the corresponding pf-sources-X.Y_pZ-rN
for "the full pf-kernel patchset", and described the trade-off as "missing linux-
stable security fixes" (or per-slot "missing all N stable releases"). That's mildly
inaccurate: r1/r2 does miss the bulk of the linux-stable flow, but it ships surgical
CVE backports (pf-cves-surgical) for the most severe upstream vulnerabilities.
Rephrase across all 19 slots to keep the per-slot specificity (count + range on Shape
B; M-N range on Shape C) while making clear that r1/r2 closes the most severe gaps.
Also fix a stale pointer in 6.1_p6 that read "pf-sources-6.1_p6 (without -r70)" — no
such ebuild exists; the actual revisions are -r1 and -r2, so point at -r2 like the
other Shape A slots.

commit 89a4c13d78361c0e7ef1616c07f6b12e3ce08b29
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Fri May 15 13:18:33 2026 +0200

sys-kernel/pf-sources-extended: drop 7.0_p2 (retire 7.0 slot)

Retire the pf-sources-extended 7.0 slot. The 7.0_p2 ebuild pinned
K_GENPATCHES_VER=4 (linux-stable through 7.0.3) and is vulnerable to
CVE-2026-43284 (xfrm ESP shared-frag, fixed in 7.0.5).

Bumping to K=9 (linux-7.0.7) is mechanically straightforward but
invalidates pf-curated-7.0's 0001-fixes-stable-backports.patch: the
fixes pf cherry-picked have already been backported by linux-stable
into 7.0.5/.6/.7, and re-applying pf's older cuts collides hard on
security/selinux/hooks.c, landlock selftests, and vma stubs. Re-cutting
0001 against natalenko's current fixes-7.0 tip is the recipe-correct
fix but the user-visible delta is near-zero — linux-stable shipped
the same fixes, often in newer form.

Users wanting a security-current 7.0 kernel on this overlay have:
- sys-kernel/pf-sources-7.0_p3-r1 (GA-only; ships pf-7.0-pf3
tarball whose source already carries the CVE-2026-43284 fix from
pf-kernel upstream, plus our ptrace dumpable surgical for the
Qualys advisory)
- sys-kernel/gentoo-sources-7.0.7 from ::gentoo

The pf-sources-extended 7.0 slot will be revisited when natalenko
tags v7.1-pfN or v7.1-flexN and linux-7.1 GAs.

commit e5b6e4674c3038158dbe19af3cef0bcac6fa6a97
Author: Ivan S. Titov <iohann.s.titov@gmail.com>
Date: Wed May 13 19:17:43 2026 +0200

sys-kernel: migrate r70-model ebuilds to pf-sources-extended

The r70 model (vanilla kernel + Gentoo genpatches + curated pf delta)
is a distinct variant from the original pf-sources models and deserves
its own package name. Rename to sys-kernel/pf-sources-extended.

20 ebuilds moved (6.1_p6 through 7.0_p2), dropping the -r70/-r71
revision suffix — the package name now differentiates the model.
KEYWORDS="" — new package, requires explicit package.accept_keywords.
Distfile bundles on extra-stuff moved in parallel from
sys-kernel/pf-sources/ to sys-kernel/pf-sources-extended/ under new
tags (pf-curated-X.Y-r70-1, pf-genpatches-X.Y-r70-1).

sys-kernel/pf-sources retains the original two models:
- active (no suffix): pf-kernel sourcetree + genpatches
- CVE-backported (-r1/-r2): active base + surgical CVE patches
for vulns pf-kernel hasn't picked up

Both packages' metadata.xml updated: pf-sources gets all three
extra-stuff remote-ids (github/gitlab/codeberg); pf-sources-extended
gets the same, without codeberg:pf-kernel/linux which belongs only
to pf-sources (that package fetches from there; extended fetches
vanilla kernel.org tarballs).