*) health - fixed broken factory voltage calibration data for some hAP ac boards;
*) health - fixed incorrect voltage after reboot on RB2011UAS;
*) icmp - fixed kernel failure when icmp packet could not be processed on high load;
*) ippool6 - fixed crash on acquire when prefix length is equal with pool prefix length;
*) ipsec - add dead ph2 detection exception for windows msgid noncompliance with rfc;
*) ipsec - added dead ph2 reply detection;
*) ipsec - don't register temporary ph2 on dead list;
*) ipsec - fix initiator modecfg dynamic dns;
*) ipsec - fixed AH with SHA2;
*) ipsec - fixed checks before accessing ph1 nat options;
*) ipsec - fixed mode-config export;
*) ipsec - fixed route cache overflow when using ipsec with route cache disabled;
*) ipsec - fixed windows msgid check on x86 devices;
*) ipsec - show remote peer address in error messages when possible;
*) ipsec - store udp encapsulation type in proposal;
*) kernel - fixed possible kernel deadlock when Sierra USB mode is being used;
*) l2tp - fixed crash when rebooting or disabling l2tp while there are still active connections;
*) lcd - reduced lowest backlight-timeout value from 5m to 30s;
*) log - added whole scep certificate chain print;
*) log - make logging process less aggressive on startup;
*) log - increase excessive multicast/broadcast warning threshold every time it is logged;
*) lte - Huawei MU609 must use latest firmware to work correctly;
*) lte - added allow-roaming option for Huawei MU709, ME909s, ME909u devices;
*) lte - added cinterion pls8 support;
*) lte - added support for Huawei E3531;
*) lte - added support for ZTE ZM8620;
*) lte - added use-peer-dns option (will work only combined with add-default-route);
*) lte - changed driver loading for class 2 usb rndis devices;
*) lte - display message in lte,error log if no response received;
*) lte - display message in lte,error log when PIN is required;
*) lte - fix crash on SXT LTE while resetting card while at high traffic;
*) lte - fixed connection for huawei without cell info;
*) lte - fixed modem init when pin request present;
*) lte - improved multiple same model modems identification;
*) lte - removed option allow-roaming for Huawei ME909u and MU609 devices;
*) lte - use only creg result codes as network status indications;
*) mesh - fixed crash when connection references a mesh network but it is not available any more;
*) modem - added support for Alcatel OneTouch X600;
*) modem - added support for SpeedUP SU-900U modem;
*) nand - improved nand refresh feature to enhance stored data integrity;
*) netinstall - fixed netinstall and cd install for x86 (broken since 6.36rc27);
*) ntp - fixed time keeping on SXT ac, RB911L, cAP and wAP
*) ovpn - enable perfect forwarding secrecy support by default;
*) ovpn - fixed compatibility with OpenVPN 2.3.11;
*) pppoe - do not allow to send out bigger packets than l2mtu if mrru is provided;
*) proxy - limit max ram usage to 80% for tile and x86 devices;
*) queue - reset queue type on interfaces which default queue type changes to no-queue after upgrade;
*) rb2011 - fixed ether6-ether10 flapping when two ports from both switch chips are in the same bridge;
*) rb3011 - fixed port flapping on ether6-ether10;
*) rb3011 - fixed reset button functionality;
*) rb3011 - fixed usb driver load (introduced in 6.36r22);
*) rb3011 - fixed usb storage mounting;
*) rb3011 - improved performance on high cpu usage;
*) route - added suppport for more than 8 bits of options;
*) route - fixed ospf by handling ipv6 encoded prefixes with stray bits;
*) route - fixed ospf-v3 crash (introduced in 6.36rc6);
*) sniffer - fixed ipv6 address matching;
*) snmp - fixed get function for snmp>=v2 when oid does not exist;
*) snmp - fixed interface stats branch from MikroTik MIB;
*) snmp - report current access technology and cell id for lte modems;
*) snmp - report ram memory as ram instead of other;
*) ssh - add rsa host key size parameter;
*) ssh-keygen - add rsa key size parameter;
*) ssl - do not exit while there still are active sessions;