the nessus-2.0.10a ebuild (and the others i guess) has this: DEPEND=">=net-analyzer/nessus-libraries-${PV} >=net-analyzer/libnasl-${PV} >=net-analyzer/nessus-core-${PV} >=net-analyzer/nessus-plugins-${PV}" RDEPEND="" that means if you emerge binary packages, there are no depends! nessus is basically NOT installed! please put these depends in RDEPEND. Reproducible: Always Steps to Reproduce: 1. emerge nessus -gkpv 2. 3. Actual Results: shows only nessus being installed Expected Results: should have shown nessus-core, nessus-plugins, nessus-library, etc.. the real depends Portage 2.0.50-r8 (default-x86-2004.0, gcc-3.3.3, glibc-2.3.3.20040420-r0, 2.6.5-gentoo-r1) ================================================================= System uname: 2.6.5-gentoo-r1 i686 Pentium III (Coppermine) Gentoo Base System version 1.4.16 Autoconf: sys-devel/autoconf-2.59-r3 Automake: sys-devel/automake-1.8.3 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CFLAGS="-O2 -march=i686 -fomit-frame-pointer -pipe" CHOST="i686-pc-linux-gnu" COMPILER="gcc3" CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-O2 -march=i686 -fomit-frame-pointer -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoaddcvs ccache fixpackages sandbox" GENTOO_MIRRORS="http://mirror.datapipe.net/gentoo http://mirror.datapipe.net/gentoo http://open-systems.ufl.edu/mirrors/gentoo ftp://ftp.gtlib.cc.gatech.edu/pub/gentoo" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://192.168.1.22/gentoo-portage" USE="X berkdb crypt curl doc gnome gtk2 jpeg mysql ncurses nls pam perl png python readline spell ssl tcpd threads tiff truetype x86 xml2 zlib"
Removed RDEPEND="" (this will get auto RDEPEND = DEPEND). fixed for 2.0.12, 2.1.0 (all the other ebuilds will get purged shortly after the GLSA will be out.)
but the packages aren't needed during installation, only during run time. It might be even more correct to put then as RDEPENDs only.