the service packs are "supposed" to have all the hot fixes and patches up to the release of the SP itself... but I have found several missing in previous ones. It doesn't take all that long to download the hot fixes and patches anyway... plus there are probably several critical ones that came out after the SP anyway.

Go surf the knowlegebase on MS, and check out the IIS pages there to find the latest greatest stuff.