Japanese catastrophe forces Cisco to delay March security update

NETWORK EQUIPMENT MAKER Cisco has delayed its planned March security advisories and notices update, blaming the recent Japanese catastrophe.

Cisco's security advisories and notices update was due out in a couple of days on 23 March and was intended for users of its IOS software on routers and switches. But Cisco has pushed that advisory date all the way back to September and deferred the disclosure for the next planned IOS software advisory.

The networking outfit claimed the security advisory was delayed because the terrible series of catastrophes hitting Japan mean that its users and the public don't have equal access to patched software.

"Based on recent events in Japan and eastern Asia, we are sensitive to the fact that customers globally are impacted directly or indirectly by these events and may not be able to respond effectively to the scheduled disclosure event," blogged Cisco's product security incident response team (PSIRT).

Pushing the planned 23 March security advisories and notices update for users of Cisco's IOS software back to the next scheduled stop in September is a long delay. But Cisco said the delay will not affect the announcement of any potential security vulnerability issues that might crop up. The networking company said it will continue to release vulnerability information as per its standard disclosure policy.

"Keeping with our policy, if we see evidence of active exploitation of a vulnerability that could lead to increased risk for Cisco customers, we will disclose appropriate information out of cycle," Cisco's PSIRT added. µ