media-sound/lastfm-desktop depends on dev-qt/qtwebkit:4 which is ancient and will never see any security updates. If it's not possible to disable it and there's no upstream port available it might be time to remove this package.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3f736b63ec62e388b85efee00c99459df2bdfca7 commit 3f736b63ec62e388b85efee00c99459df2bdfca7 Author: Michał Górny <mgorny@gentoo.org> AuthorDate: 2017-11-02 11:55:07 +0000 Commit: Michał Górny <mgorny@gentoo.org> CommitDate: 2017-11-02 12:28:51 +0000 media-sound/lastfm-desktop: Remove last-rited pkg Closes: https://bugs.gentoo.org/622632 Closes: https://bugs.gentoo.org/620710 media-sound/lastfm-desktop/Manifest | 2 -- .../files/lastfm-desktop-2.1.36-missing-cast.patch | 25 ---------------- .../lastfm-desktop/lastfm-desktop-2.1.35.ebuild | 31 -------------------- .../lastfm-desktop/lastfm-desktop-2.1.36.ebuild | 33 ---------------------- media-sound/lastfm-desktop/metadata.xml | 11 -------- profiles/package.mask | 5 ---- 6 files changed, 107 deletions(-)