As mentioned in the security bug, this one isn't affected by CVE-2008-3834.
We created 1.2.3-r1 for this purpose. It already contains the fix and has been stabilized.
You seemmed to misunderstood me. This wasn't meant to be a security bug, just a normal version bump. While there were few fixes between 1.2.3 and 1.2.4, there was still bit more than just the security bug.
The fixes are trivial and have no effect for Gentoo users.
As mentioned 1.2.3-r1 has the patchsets that make up 1.2.4 - there's a newer release out now but I am waiting as it breaks a few apps, off the top of my head from reading the thread/bugs on fdo, Avahi, PolicyKit, PackageKit (doesn't affect Gentoo), ConsoleKit, and bluez. Once that is sorted out a bit, I'll be putting it in the tree.