“Cisco is announcing program changes for the publication schedule for Cisco Internetwork Operating System (IOS) Security Advisories.
Starting on March 26, 2008, Cisco will release bundles of IOS Security Advisories on the fourth Wednesday of the month in March and September of each calendar year.
This schedule change will not restrict us from promptly publishing an individual IOS security advisory for a serious vulnerability which is publicly disclosed or for which we are aware of active exploitation.
Cisco is adopting this approach in response to extensive feedback from customers, who seek further predictability for support planning and deployment cycles.
The current format of IOS Security Advisories will remain the same. The software table in the advisory includes a list of recommended releases (where possible) for each software train that addresses all of the security vulnerabilities included in the bundle.
All other non-IOS Cisco security vulnerabilities will continue to be announced per Cisco’s standard disclosure policy, available at http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html.”
Source: http://www.cisco.com/en/US/products/products_security_advisories_listing.html
