We have a commercial application and are running VFP 9 SP1. We did not upgrade to VFP9 SP2 because we heard of all of the bugs that were not in SP1 that now are in SP2 - especially in the area of reports.

List of bugs in VFP9 SP2
http://fox.wikis.com/wc.dll?Wiki~VFP9SP2BugList~Wiki

I also read about the work arounds to some of the bugs in VFP 9 SP2
http://fox.wikis.com/wc.dll?Wiki~SolutionsToVFP9SP2Bugs~VFP

And some patches by Microsoft - but it seems like there is some confusion as to how to get "the latest" version of the VFP 9 SP2 patches from microsoft and otherwise
http://rickschummer.com/blog/2009/04/vfp-9-sp2-hotfix-released.html
http://cathypountney.blogspot.com/2009/04/installing-vfp-9-sp2.html
http://vfpx.codeplex.com/Release/ProjectReleases.aspx?ReleaseId=23319