net-misc/hotot[qt4] depends on dev-qt/qtwebkit:4 which is ancient and will never see any security updates. Since there's a qt5 USE flag available, I'd suggest to just drop qt4.
*** This bug has been marked as a duplicate of bug 608606 ***