about the NetBSD-SA2008-003

["史斌" <shibin%proba.com.cn@localhost>]

As the announcement on 
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-003.txt.asc 
and
http://www.netbsd.org/support/security/patches-3.1.1.html

1. This security problem affected NetBSD-3.1 release and did not affect
   NetBSD-3.1.1 release.

2. NetBSD-3.1.2 which will be released in the future contains
   the fixed.

3. It can be fixed by fixing sys/netinet6/ipcomp_input.c

   However, I found the source file sys/netinet6/ipcomp_input.c in
NetBSD-3.1.1 release is same to the file in the NetBSD-3.1 release, 
and is different from the file in the source tree of NetBSD-3-1 branch.

   Does it mean that the file in NetBSD-3.1 is not fixed and the 
file in the source tree of NetBSD-3-1 branch is fixed?

   If it is true, why NetBSD-3.1 release is affected but NetBSD-3.1.1
release is not?

   Thank you.