Download Latest Version v2.2.2.tar.gz (509.5 kB) Google Add to Preferred Sources
Home / v4.4.3
Name Modified Size InfoDownloads / Week
Parent folder
poweradmin-poweradmin_4_4_3.spdx.json 2026-10-22 977.0 kB
0
README.md 2026-10-21 2.4 kB
0
v4.4.3 source code.tar.gz 2026-10-21 15.3 MB
0
v4.4.3 source code.zip 2026-10-21 20.0 MB
0
Totals: 4 Items   36.3 MB 0

Docker images now ship PHP 8.4.27 (FrankenPHP 1.13.2), fixing CVE-2026-109618 and CVE-2026-109619 in PHP. If you install without Docker, upgrade PHP on your host.

✨ Highlights

A patch release for the 4.4 LTS line: the Docker image moves to the patched PHP, plus zone access checks, SAML, import, PostgreSQL upgrade and API backend mode fixes. No database migration.

🐛 Fixes

  • Docker - PHP 8.4.27 with FrankenPHP 1.13.2, and a non-numeric DB_PORT is refused with a warning when localhost makes MySQL ignore it (#1672).
  • Zone access - record, bulk delete and batch PTR pages check zone access before showing a zone name or saying whether a zone or record exists.
  • SAML can refuse responses that don't answer a sign-in started from this browser (opt-in, see below).
  • Zone import skips the DNSSEC records PowerDNS generates itself (#1684).
  • API addresses zones by the PowerDNS zone id, so classless reverse zones survive a proxy that decodes URLs (#1685).
  • API backend mode - a deleted user's zones keep their new owner when they are handed over, and the user being deleted is no longer offered as the new owner.
  • PostgreSQL upgrades - the 4.1.0 and 4.2.0 update scripts resync the permission sequences, so databases installed before 4.0.5 no longer fail or lose permission templates (#1650).
  • Dynamic DNS lowercases the hostname, so a mixed-case client can't create a duplicate record.
  • Bulk add is capped at 1000 lines with a longer time limit, and each record is rectified and logged once.
  • Add Record caps its rows and refuses a submit cut short by max_input_vars.
  • Encrypted settings with a malformed IV are treated as empty instead of raising a warning.

📦 Upgrading

Drop-in replacement for v4.4.2:

  • Docker - pull the new image; 4.4.2 still contains PHP 8.4.26.
  • New opt-in setting: allow_idp_initiated per SAML provider (default true, no change). Set it to false to refuse responses not tied to a sign-in started here.
  • DB_PORT must be numeric in the Docker image.

PHP 8.2+.

Full changelog: https://github.com/poweradmin/poweradmin/compare/v4.4.2...v4.4.3

Source: README.md, updated 2026-10-21