@ABCFED - the Exchange PG is dispersed across multiple different environments; some are in the multi-tenant service, some are in our Exchange Dogfood forest, some are in the corporate environment, and even a few are in the Office 365-Dedicated environment. So not all of them have this specific patch installed; some have the Exchange 2010 patch installed; some have had new builds of Exchange 2013 installed that already include the security update.
@BT - Yes, my mailbox is on an on-premises E2013 RTM CU2 server and the patch is installed. Please remember, the updated security binaries were not the issue with the recall; it was a setup issue (specific to how Search Foundation is installed) that caused the problem. The updated binaries have nothing to do with search.
@Benoit - This update will not need to be removed in order to install CU3 (or a later CU in the event you don't deploy CU3).