they fixed a security bug in the routines which deal with invalid requests and also fixed some syntax code errors, like the korean language for example... and some extra misspells (araxis merge compariason). nothing that would affect us locally. the security bug was always present until 2.0.36. aparently they fix it in 2.0.39, but created another one related to php apache SAPI module.
i updated some useful info related to the current conflict between php and apache,
here.