GLSA-201409-10 provides 5 different commands to update various versions of bash: All Bash 3.1 users should upgrade to the latest version: ... # emerge --ask --oneshot --verbose ">=app-shells/bash-3.1_p18-r1" All Bash 3.2 users should upgrade to the latest version: ... # emerge --ask --oneshot --verbose ">=app-shells/bash-3.2_p52-r1" All Bash 4.0 users should upgrade to the latest version: ... # emerge --ask --oneshot --verbose ">=app-shells/bash-4.0_p39-r1" All Bash 4.1 users should upgrade to the latest version: ... # emerge --ask --oneshot --verbose ">=app-shells/bash-4.1_p12-r1" All Bash 4.2 users should upgrade to the latest version: ... # emerge --ask --oneshot --verbose ">=app-shells/bash-4.2_p48-r1" All commands except the very last one are wrong, and will not properly update older versions because bash is SLOTted. Every listed command will install only the latest version of bash (i.e., some 4.2 version). Corrected commands: # emerge --ask --oneshot --verbose ">=app-shells/bash-3.1_p18-r1:3.1" # emerge --ask --oneshot --verbose ">=app-shells/bash-3.2_p52-r1:3.2" # emerge --ask --oneshot --verbose ">=app-shells/bash-4.0_p39-r1:4.0" # emerge --ask --oneshot --verbose ">=app-shells/bash-4.1_p12-r1:4.1"
Thanks for reporting, this is now fixed in all the three latest bash advisories. (On a related note: Warnings from glsa-check due to missing SLOT support are a known issue which we cannot solve at the moment.)
