In reply to Blake VandeVelde.

Hi Blake. Thanks for taking the time to comment; we're pleased that your organization appreciates the semiannual disclosure schedule for Cisco IOS Software.

Although we don't have scheduled dates for vulnerability disclosures in other software at this time, we make every effort to "bundle" together multiple Security Advisories when possible (for instance, with Cisco ASA Software, like you referenced). However, we want to be very clear that ASA vulnerability disclosures are absolutely not related to the semiannual IOS bundles. If we ever determine that ASA is affected by any of the vulnerabilities included in an IOS bundle, they will be disclosed on the same day.

Please feel free to review our public Security Vulnerability Policy (http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html), which contains detailed information about our disclosure practices.