Cisco Security Advisories and Notices

Protect Your Network

---

Cisco is announcing program changes for the publication schedule for Cisco Internetwork Operating System (IOS) Security Advisories.

Starting on March 26, 2008, Cisco will release bundles of IOS Security Advisories on the fourth Wednesday of the month in March and September of each calendar year.

This schedule change will not restrict us from promptly publishing an individual IOS Security Advisory for a serious vulnerability which is publicly disclosed or for which we are aware of active exploitation.

Cisco is adopting this approach in response to extensive feedback from customers, who seek further predictability for support planning and deployment cycles.

The current format of IOS Security Advisories will remain the same. The software table in the Advisory includes a list of recommended releases (where possible) for each software train that addresses all of the security vulnerabilities included in the bundle.

All other non-IOS Cisco security vulnerabilities will continue to be announced per Cisco's standard disclosure policy.

---

Security Advisories, Responses, and Notices
The Cisco Product Security Incident Response Team (PSIRT) creates and maintains publications for security issues that affect Cisco products. For more information, review a description of the types of documents and the issues that they address.

PSIRT RSS Feed

---

Additional Information

Security Vulnerability Policy

Security Reference Information

Contact Information for Law Enforcement

Product Alert Tool