CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

devel/pear-geshi 1.0.9.1

Generic syntax highlighter written in PHP

Port info

Maintainer
michael.osipov@innomotics.com
Packages
latest: php82-pear-geshi-geshi 1.0.9.1, php83-pear-geshi-geshi 1.0.9.1, php84-pear-geshi-geshi 1.0.9.1, php85-pear-geshi-geshi 1.0.9.1, php86-pear-geshi-geshi 1.0.9.1
Upstream
up to date
Last update
to 1.0.9.1 · 8881c82cd8
Quarterly
2026Q4: php82-pear-geshi-geshi 1.0.9.1, php83-pear-geshi-geshi 1.0.9.1, php84-pear-geshi-geshi 1.0.9.1, php85-pear-geshi-geshi 1.0.9.1, php86-pear-geshi-geshi 1.0.9.1
WWW
http://qbnz.com/highlighter/
Links
cgit · VuXML

Install

Package
# pkg install php82-pear-geshi-geshi
# pkg install php83-pear-geshi-geshi
# pkg install php84-pear-geshi-geshi
# pkg install php85-pear-geshi-geshi
# pkg install php86-pear-geshi-geshi
installs php82-pear-geshi-geshi 1.0.9.1, php83-pear-geshi-geshi 1.0.9.1, php84-pear-geshi-geshi 1.0.9.1, php85-pear-geshi-geshi 1.0.9.1, php86-pear-geshi-geshi 1.0.9.1 from latest; from quarterly (2026Q4) php82-pear-geshi-geshi 1.0.9.1, php83-pear-geshi-geshi 1.0.9.1, php84-pear-geshi-geshi 1.0.9.1, php85-pear-geshi-geshi 1.0.9.1, php86-pear-geshi-geshi 1.0.9.1
Port
# cd /usr/ports/devel/pear-geshi && make install clean
Size
678 KiB download · 4.1 MiB installed
Depends on
devel/pear 1.10.18, devel/pear-channel-geshi 20180906, lang/php82 8.2.35_2
License
GPLv2
Note
Size, dependencies, options and messages are those of php82-pear-geshi-geshi.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.0.9.11.0.9.1–
FreeBSD 151.0.9.11.0.9.1–
FreeBSD 141.0.9.11.0.9.11.0.9.1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.0.9.11.0.9.1–
FreeBSD 141.0.9.11.0.9.11.0.9.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 1.0.9.1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2025-21235.12025-03-09A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.p…

VuXML only (0)

Listed in VuXML, the packaged version 1.0.9.1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (9)

Michael Osipov (michaelo) · 1.0.9.1
*/*: Update my email address

Since Siemens has sold our subsidiary to KPS Capital Partners we are now
legally a separate company with new public email addresses. Old ones
will go away in the future.

Approved by:	jrm (mentor)
Differential Revision:	https://reviews.freebsd.org/D48171
8881c82cd8
Yasuhiro Kimura (yasu) · 1.0.9.1
devel/pear-geshi: Update to 1.0.9.1

PR:		266448
73e6b03413
Stefan Eßer (se) · 1.0.9.0
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.0.9.0
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Stefan Eßer (se) · 1.0.9.0
devel/pear-geshi: Add CPE information

Approved by:	portmgr (blanket)
332d7844f0
Mathieu Arnold (mat) · 1.0.9.0
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.0.9.0
Remove # $FreeBSD$ from Makefiles.
305f148f48
Alexey Dokuchaev (danfe) · 1.0.9.0
Sanitize COMMENT per Section 5.6 of the FreeBSD Porter's Handbook (part 7).
0f7042e5fe
Johannes M Dieterich (jmd) · 1.0.9.0
new port: devel/pear-geshi

PHP-based syntax highlighter installed via pear.

PR:		231888
Submitted by:	Michael Osipov <michael.osipov@siemens.com>
a97ed82535