NIST is releasing supplemental USGCB SCAP 1.0 content for Windows due to an issue that has been identified with the current content. This issue may cause excessive directory server performance degradation or system failure. The supplemental content will use an alternate method for checking the file effective rights in the USGCB content that avoids the performance issue. Although this alternate method is a valid SCAP 1.0 checking method, it was not part of the SCAP 1.0 Validation Program; therefore, NIST cannot post the content as Tier IV content as defined by SP 800-70rev2. For users who are experiencing directory server performance issues caused by the existing USGCB content, the supplemental USGCB SCAP 1.0 content will be available on the NIST USGCB web site within two months of the publication date of this notice.

discovered 11 months ago




See all items from the same source