How to update a single package in a Satellite Clone?

With the recent event regarding bash, we obviously need to update the bash package in our environment.

I currently still have hosts subscribed to the "default" Red Hat parent channels and then I have hosts subscribed to clones which were taken weeks 25 and 37 of this year.

My questions are:
* aside from manually adding the bash package to my legacy clones (via the WebUI), what are my options for updating my clones?
* What are some of the risks of introducing a single package update to a point in time clone with an older date?