It is getting quite confusing of what patches to apply to each different version and CU version of SQL Server. We have so many versions and at different releases here.

I don't know if I agree with putting other fixes into a security patch. I guess that can be debated until the end of time though.