Gentoo has updated bash with additional fixes for the shell shock vulnerability:

http://www.gentoo.org/security/en/glsa/glsa-201410-01.xml

Funtoo has this forked this ebuild and needs to pull in the latest changes from upstream (versions < 4.2_p52 are vulnerable).