From: Aurelien Poscia Date: Wed, 30 Mar 2022 11:57:25 +0000 (+0200) Subject: SONAR-16204 Upgrade notes for SHA1 hash method removal X-Git-Tag: 9.4.0.54424~15 X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=27fd46bf2285641b83d8dacff143192eb63ced02;p=sonarqube.git SONAR-16204 Upgrade notes for SHA1 hash method removal --- diff --git a/server/sonar-docs/src/pages/setup/upgrade-notes.md b/server/sonar-docs/src/pages/setup/upgrade-notes.md index 7f40d54ccc8..96544b1e636 100644 --- a/server/sonar-docs/src/pages/setup/upgrade-notes.md +++ b/server/sonar-docs/src/pages/setup/upgrade-notes.md @@ -3,6 +3,12 @@ title: Release Upgrade Notes url: /setup/upgrade-notes/ --- +## Release 9.4 Upgrade notes +**Password of old inactive account needs reset** +The support for SHA1 hashed password has been removed. This algorithm was replaced by a stronger hashing algorithm since version 7.2. As a result, local accounts that did not log in since 7.2 will be forced to have their password reset by a SonarQube administrator. Accounts using external authentication such as SAML, LDAP, GitHub authentication, etc., are not impacted. Information about the possibly impacted accounts will appear in the logs during the upgrade. ([SONAR-16204](https://jira.sonarsource.com/browse/SONAR-16204)). + +[Full release notes](https://jira.sonarsource.com/secure/ReleaseNote.jspa?projectId=10930&version=17167) + ## Release 9.3 Upgrade Notes **Portfolio overview now shows ratings on both New Code and Overall Code** The Portfolio overview and project breakdown have been redesigned to provide a high-level view on project health according to your New Code definition as well as Overall Code. New Code ratings are shown for Reliability, Security Vulnerabilities, Security Review, and Maintainability. To see these ratings on New Code, Portfolios need to be recomputed after upgrading to 9.3.