The new "extensions" use flag compiles iptables against the kernel source found in /usr/src/linux. (As shown in bug #53537). Without the flag, iptables should compile against linux-headers instead of the kernel. Because of this, the depend for virtual/linux-sources should be dependent on the extensions flag (as a portage installed /usr/src/linux is unneeded if extensions is disabled). Reproducible: Always Steps to Reproduce:
Created attachment 34437 [details] Ebuild with corrected DEPEND
Fixed in CVS, thanks!