Overview

As part of uKnowva HRMS's response to the PHP security vulnerabilities CVE-2026-109618 and CVE-2026-109619, the uKnowva team completed the migration of all uKnowva instances to PHP 8.5.12 on the night of 26 October 2026.

PHP 8.5.12 was selected as the primary migration target because it includes fixes for both identified vulnerabilities. The migration was undertaken across all instances to ensure that the entire environment moved to the fixed PHP version.

The rollout was executed in phases rather than updating all instances at once. This approach allowed the team to progress through the instance environment in manageable batches until every instance had been upgraded.

Migration Timeline and Execution

The migration was carried out on 26 October 2026, with the rollout continuing into the night until all instances had been updated.

The team followed a phased deployment approach:

Phase 1: Initial Batch of 100 Instances

The rollout began with the first batch of 100 instances. This marked the beginning of the production migration to PHP 8.5.12.

Phase 2: Second Batch of 100 Instances

Following the initial batch, the team proceeded with another 100 instances. This continued the rollout while keeping the deployment organised into manageable groups.

Phase 3: Remaining Instances

After the first two batches, the team continued updating the remaining instances in subsequent phases. The process continued until the migration was complete across the entire environment.

Phase 4: Migration Completion

By the end of the rollout on the night of 26 October 2026, all uKnowva instances had been upgraded to PHP 8.5.12.

Final Migration Status

The migration has been completed across all uKnowva instances.

• Migration date: 26 October 2026, night

• Target PHP version: PHP 8.5.12

• Scope: All uKnowva instances

• Deployment approach: Phased rollout

• Final status: Migration completed

All instances are now running PHP 8.5.12, the fixed version addressing CVE-2026-109618 and CVE-2026-109619.

Relationship to the Security Advisory

This migration completes the planned PHP version upgrade described in the uKnowva HRMS Security Advisory.

The advisory covered the identified vulnerabilities and the response planned to address them. This document records the completion of the PHP version migration across all instances.

For details about the migration strategy and the version selection, refer to the PHP Security Upgrade Plan.

Conclusion

With the migration completed, all uKnowva instances have moved to PHP 8.5.12. This marks the completion of the planned version upgrade in response to the identified PHP vulnerabilities and establishes a consistent PHP version across the uKnowva environment.

If you experience any issues following the migration, please contact our helpdesk at This email address is being protected from spambots. You need JavaScript enabled to view it. for assistance.