Five releases today: 4.5.1, 4.4.3, 4.3.7, 4.2.8 and 3.9.14. Sorry for another round only two days after 4.5.0, but this one couldn’t wait until November.
🔒 Why now
On 21 October PHP fixed two critical bugs that can allow unauthenticated remote code execution (CVE-2026-109618, CVE-2026-109619; see the PHP 8.4.27 announcement and changelog). Poweradmin’s own code is not affected, but it runs on PHP, and the Docker images bundle their own PHP, so they only get the fix from a new image.
🐳 Docker
4.5.1, 4.4.3, 4.3.7 and 4.2.8 ship PHP 8.4.27, and 3.9.14 ships PHP 8.2.35. Pull the new tag from Docker Hub and recreate the container (see the Docker guide); latest, stable and lts already point to the new builds. Older version tags such as 4.5.0 still have the unpatched PHP.
🖥 Without Docker
Upgrade PHP on your host to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart PHP-FPM or your web server. PHP 8.1 is end of life and gets no fix, so 3.x users on 8.1 should move to 8.2 or newer.
📡 PowerDNS
PowerDNS also released 4.9.18, 5.0.8 and 5.1.5 for CVE-2026-73206 (advisory 2026-13). If you run the PowerDNS server that Poweradmin manages, upgrade it too.
📦 Also in these releases
4.5.1 and 4.4.3 include the fixes planned for November, and all updates are drop-in with no database changes. Details are in the release notes linked above.
🙏 Thanks
frenkye for the LDAP auto-provisioning fix in 4.5.1
MrClock8163 for the LDAP reports and the DN mapping fix
💙 Support
Commercial support, upgrades and sponsored feature development are available, see Support & Sponsorship. Donations are accepted through GitHub Sponsors, Open Collective and PayPal.
Thanks, was waiting for it! :)
Successfully patched primary and secondary servers to Poweradmin 4.5.1 and PowerDNS 5.1.5.
php -v shows 8.4.27 now inside the container