emerge should support a security update flag. Sometimes you don't want to compile all packages at once, but only the security relevant ones. A command like emerge --update world-security and emerge --update system-security would be great. Reproducible: Always Steps to Reproduce: 1. 2. 3.
There's another tool for that, glsa-check, included in app-portage/gentoolkit
Thanks, didn't know that!