This is mainly a security update including xmlrpc fixes from mid August, which were not availible in all package formats. It also included a preventiv fix which allows to switch the xmlrpc and soap subsystems on or off (default).
We advice everyone to update to that release.
- further xmlrpc security fixes (already included in the tgz from mid Aug)
- xmlrpc and soap subsystem is now deactivated by default, it can be enabled via Admin >> site configuration if needed