#!/bin/bash
# Afrihost - print out info showing if rpms pached or not for cve CVE-2026-10961

if [ -f /usr/local/afribin/php_patch_check.sh ] ; then 

echo -e  "\n\n===== CPANEL USE THEIR OWN BINARIES FOR PHP ===="
echo -e "Refer to their patched version post:\nhttps://support.cpanel.net/hc/en-us/articles/44397389677335-Critical-PHP-Security-Release-CVE-2026-109618-and-CVE-2026-109619"
echo -e "\n========= Server version report ====="
/usr/local/afribin/php_patch_check.sh | awk  '{print $2}' | while read pvers ;  do 
 echo -e "\n ==== CVE-2026-109618, CVE-2026-109619 Patch info $pvers === " 
 echo "rpm -q --changelog $pvers | grep -m1 CVE-2026-10961" ; 
 rpmqueryresult="$(rpm -q --changelog $pvers | grep -m1 CVE-2026-10961)"
 rpmclibin=$(echo $pvers | sed 's/\-php\-cli//')
 echo " $(rpm -q --changelog $pvers | grep -m1 CVE-2026-10961)"  
 if echo "$rpmqueryresult" | grep -q 10961  ; then 
        echo "$($rpmclibin -v)"
	 echo  "== $pvers  - PATCHED"
 else 
	echo "== $pvers  - NOT-PATCHED"
        echo "$($rpmclibin -v)"
 fi	
 done 
fi
exit