This is mainly a security update including xmlrpc fixes from mid August, which were not availible in all package formats. It also included a preventiv fix which allows to switch the xmlrpc and soap subsystems on or off (default).
We advice everyone to update to that release.
Changes:
- further xmlrpc security fixes (already included in the tgz from mid Aug)
- xmlrpc and soap subsystem is now deactivated by default, it can be enabled via Admin >> site configuration if needed
Download it from https://sourceforge.net/project/showfiles.php?group_id=78745&package_id=79971&release_id=355904