Do I need to install Security Hotfix (KB2977319) after Cumulative Update 12 for SQL Server 2008 R2 SP2

Question

HI,
I have installed Cumulative Update 12 for SQL Server 2008 R2 SP2 on my SharePoint instances. This was to resolve a known  issue faced with the instance. CU12 helped resolve the issue. My company is rather strict regarding security hotfixes. But I am
not sure if this particular hotfix [Security Hotfix (KB2977319)] is required if the instance has CU12 applied.
Tested this on a Lab server, the installation did run fine, the summary log also stated that the KB is applied. But the Build Number did not change. Hence the doubt.
Overall summary:
  Final result:                  Passed
  Exit code (Decimal):           0
  Exit message:                  Passed
  Start time:                    2014-09-06 10:31:21
  End time:                      2014-09-06 10:55:49
  Requested action:              Patch
Instance SPNTSQLTRN overall summary:
  Final result:                  Passed
  Exit code (Decimal):           0
  Exit message:                  Passed
  Start time:                    2014-09-06 10:48:08
  End time:                      2014-09-06 10:55:45
  Requested action:              Patch
Package properties:
  Description:                   SQL Server Database Services 2008 R2
  ProductName:                   SQL2008
  Type:                          RTM
  Version:                       10
  SPLevel:                       2
  KBArticle:                     KB2977319
  KBArticleHyperlink:            http://support.microsoft.com/?kbid=2977319
  PatchType:                     QFE
  AssociatedHotfixBuild:         0
  Platform:                      x64
  PatchLevel:                    10.52.4321.0
  ProductVersion:                10.52.4000.0
  GDRReservedRange:              10.50.4001.0:10.50.4199.0;10.50.4200.0:10.50.4250.0
  PackageName:                   SQLServer2008-KB2977319-x64.exe
  Installation location:         e:\ac2af22d88ee645b5b32b5c178\x64\setup\
Please inform if I need to apply the hotfix on CU12. Thanks in advance.
John S

Answer 1

Yes you must install Security update mentioned in KB 2977319 it is important for SQL Server to be patches with this security update. Without this it could allow an attacker to compromise your system and gain control over it.
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it
My Technet Articles