I am glad to inform you that we have just released service pack 2 for Sitefinity 3.6.
You can find the official announcement on our forums in this post: http://www.sitefinity.com/support/forums/support-forum-thread/b1043S-cbdked.aspx
As you will see an important security vulnerability has been patched and we'd highly recommend to everyone to upgrade to this service pack. We will not be commenting on the details of the vulnerability to avoid exposing clients that do not upgrade to unnecessary risk. We have discovered the problem during our standard Q&A process and no one has yet reported it.
Along with that fix, several other problems reported through our support system have been fixed.
You can download the service pack from your Client.net accounts.