Does 3.1 fix security prob. in 3.0?

[Arthur B. Smith]

Several months ago, when Ultrix 3.0 was the latest greatest thing, DEC
sent out a "Mandatory Workaround" to avoid problems from chfn, chsh
and domainname.  Now we have Ultrix 3.1 (which replaced chfn and chsh,
but not domainname).  I called DEC Software Support in Atlanta this
morning, and they not only didn't know if 3.1 fixed these bugs, they
didn't know anything at all about the bugs in 3.0....!  They have the
call out to some other part of the company to find out about this, but
expect it to take several days.  Does anyone out there in Netland know
whether Ultrix 3.1 fixed any or all of these problems?  

    	-art smith  (art at dinorah.wustl.edu, ...!uunet!wucs1!dinorah!art)

"DEC -- not only doesn't their right hand know what the left hand is
doing, it is surprised to find out there IS a left hand."   -me

Usual disclaimers....