The ebuild for www-apache/modsecurity-crs-2.2.4 has a broken file size in the ebuild Manifest. This means that merging is not successful: ... !!! Fetched file: modsecurity-crs_2.2.4.tar.gz VERIFY FAILED! !!! Reason: Filesize does not match recorded size !!! Got: 289549 !!! Expected: 296026 Refetching... File renamed to '/var/portage/distfiles/modsecurity-crs_2.2.4.tar.gz._checksum_failure_.4VCN6q' "Correcting" the Manifest manually fixes the bug and the package merges successfully. All SourceForge mirrors of the file deliver exactly this size.
Location: http://switch.dl.sourceforge.net/project/mod-security/modsecurity-crs/0-CURRENT/modsecurity-crs_2.2.4.tar.gz [following] --2012-03-24 17:19:54-- http://switch.dl.sourceforge.net/project/mod-security/modsecurity-crs/0-CURRENT/modsecurity-crs_2.2.4.tar.gz Resolving switch.dl.sourceforge.net (switch.dl.sourceforge.net)... 130.59.138.21, 2001:620:0:1b::21 Connecting to switch.dl.sourceforge.net (switch.dl.sourceforge.net)|130.59.138.21|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 289549 (283K) [application/x-gzip] Saving to: `/world/distfiles/modsecurity-crs_2.2.4.tar.gz' 100%[==========================================================================================>] 289,549 1.53M/s in 0.2s 2012-03-24 17:19:55 (1.53 MB/s) - `/world/distfiles/modsecurity-crs_2.2.4.tar.gz' saved [289549/289549] !!! Fetched file: modsecurity-crs_2.2.4.tar.gz VERIFY FAILED! !!! Reason: Filesize does not match recorded size !!! Got: 289549 !!! Expected: 296026 Refetching... File renamed to '/world/distfiles/modsecurity-crs_2.2.4.tar.gz._checksum_failure_.cVyhuJ'
Upstream changed the tarball, but there is no content difference in it. I've updated the Manifest.