Microsoft published Windows Server 2003 SP2 today, see http://www.microsoft.com/technet/windowsserver/sp2.mspx for details. There is also a blocker tool available that you can use if you don't want your 2003 servers to automatically update through Windows Update at this time. We from ISC recommend that you roll 2003SP2 into your normal update cycle like any other set of patches -- test, then apply. As far as we can tell from the descriptions, this really is more a service pack than a feature pack this time, so the number of surprises might well be smaller than was the case with SP1.
It also looks like patch 929338 for XPSP2 has been moved from the "patch only if affected" to the general release on Windows Update this month.