#! /bin/bash 


CVE='CVE-2026-109618'
rpm -qa --qf '%{NAME}\n' \
    | grep -E '^(ea-php[0-9]+-php-cli|alt-php[0-9]+-cli)$' \
    | sort -V \
    | while read -r pkg; do
        if rpm -q --changelog "$pkg" 2>/dev/null | grep -q "$CVE"; then
            printf 'PATCHED     %s\n' "$pkg"
        else
            printf 'NOT_PATCHED %s\n' "$pkg"
        fi
    done