See bug # 100243. I upgraded a bunch of machines to logwatch-7.1 a while back (from different versions). Now I have /etc/cron.daily/00logwatch and /etc/cron.daily/logwatch, so it's running twice. Should future ebuilds test for /etc/cron.daily/logwatch and remove it in favor of 00logwatch?
fixed in cvs