I agree about incremental updates. But if you want the Bash patches, why wait? Just fire up Warehouse and update the Bash package as provided there. That way you're fixed.