3.6.1p2 plus buffer overflow vulnerabilities patch, sufficient?

[Jay Libove]

Because of the high volume of discussion of various minor or somewhat
serious problems and incompatibilities introduced in the 3.7x series, I
prefer to stay with 3.6.1p2 plus the buffer overflow vulnerabilities patch
for a while.

Are there any other security changes introduced in the 3.7x series from
3.6.1p2 other than the back-ported patch for the buffer overflow
vulnerabilities announced a few weeks ago?

Thanks
-Jay