3.Microsoft XML Editor Information Disclosure Vulnerability (MS11-049)

-- This security patch is released on Feb 2012 before of the SQL Server 2008 R2 SP2(june 2012). DO i need to still apply this patch on the server. Does the Service packs include the Security patch releases which are released before to SP?