Download Latest Version v2.2.2.tar.gz (509.5 kB) Google Add to Preferred Sources
Home / v4.5.1
Name Modified Size InfoDownloads / Week
Parent folder
poweradmin-poweradmin_4_5_1.spdx.json 2026-10-22 981.2 kB
0
README.md 2026-10-22 2.5 kB
0
v4.5.1 source code.tar.gz 2026-10-22 23.5 MB
0
v4.5.1 source code.zip 2026-10-22 28.9 MB
0
Totals: 4 Items   53.4 MB 0

Docker images now ship PHP 8.4.27 (FrankenPHP 1.13.2), fixing CVE-2026-109618 and CVE-2026-109619 in PHP. If you install without Docker, upgrade PHP on your host.

✨ Highlights

A patch release: the Docker image moves to the patched PHP, plus zone access checks, SAML, import and bulk-add fixes. No database migration.

🐛 Fixes

  • Docker - PHP 8.4.27 with FrankenPHP 1.13.2, and a non-numeric DB_PORT is refused with a warning when localhost makes MySQL ignore it (#1672).
  • Docker image includes addons/send_record_changes_email.php, so the record change digest can run from cron with docker exec.
  • Zone access - record, bulk delete, batch PTR and catalog pages check zone access before showing a zone name or saying whether a zone or record exists.
  • LDAP auto-provisioning works for users who aren't in Poweradmin yet (#1768), and a failed LDAP login shows the same message as a failed local one.
  • SAML can refuse responses that don't answer a sign-in started from this browser (opt-in, see below).
  • Zone import skips the DNSSEC records PowerDNS generates itself (#1684).
  • API - zones are addressed by the PowerDNS zone id, so classless reverse zones survive a proxy that decodes URLs (#1685), and the v2 dynamic DNS endpoint lowercases the hostname.
  • Bulk add is capped at 1000 lines with a longer time limit, and each record is rectified and logged once.
  • Add Record caps its rows and refuses a submit cut short by max_input_vars.
  • Record names are looked up through the index instead of scanning every record.

📦 Upgrading

Drop-in replacement for v4.5.0:

  • Docker - pull the new image; 4.5.0 still contains PHP 8.4.26.
  • New opt-in setting: allow_idp_initiated per SAML provider (default true, no change). Set it to false to refuse responses not tied to a sign-in started here.
  • DB_PORT must be numeric in the Docker image.
  • LDAP group mappings with full DNs (memberOf) can't be set through PA_LDAP_*_MAPPING yet; set them in settings.php (#1769, fix planned for 4.5.2).

PHP 8.2+.

Full changelog: https://github.com/poweradmin/poweradmin/compare/v4.5.0...v4.5.1

Source: README.md, updated 2026-10-22