app-cdr/acetoneiso depends on ancient dev-qt/qtwebkit:4 which is ancient and will never see any security updates. Since acetoneiso is dead upstream for years and has no Qt 5 port I'd suggest treecleaning it.
commit aa0b56de83637242288d87ab17773a22462fc372 Author: Michał Górny <mgorny@gentoo.org> AuthorDate: Sun Jul 30 09:10:20 2017 Commit: Michał Górny <mgorny@gentoo.org> CommitDate: Sun Jul 30 09:14:14 2017 app-cdr/acetoneiso: Remove last-rited pkg, #620688