Bugs blocking this tracker have an explicit dependency on a version of xerces-c which is less than 3.0.0. All of these ebuilds must be fixed since earlier versions of xerces-c have a security vulnerability, and those versions of xerces-c need to be removed from the tree or hard-masked.
Just put dbxml-2.5.16 in the tree which finally works with xerces-c-3*. p.masked deprecated versions of dbxml, xqilla and xerces-c to give people time to upgrade their databases.
All blockers have been resolved and vulnerable versions removed.