On Wed, Jun 08, 2022 at 08:46:21PM +0200, Caspar Schutijser wrote:
> Hi,
>
> On Wed, Jun 08, 2022 at 02:04:47PM +0000, Yifei Zhan wrote:
> > here is a security update for Tor browser:
> >
> > - update to Tor browser 11.0.14
> > - update to NoScript 11.4.6
> > - update to Firefox ESR 91.10
> > https://www.mozilla.org/en-US/security/advisories/mfsa2022-21/
> >
> > - tested .onion access/CJK fonts/JS blocking, no issue so far.
> > - -stable patch will be sent tomorrow, my -stable test box is still
> > building...
> >
> > changelog:
> > https://blog.torproject.org/new-release-tor-browser-11014/
>
> Thanks for your diff and your testing, I have the same diff but I also
> synced the recent unveil changes that were recently applied to
> www/firefox-esr.
>
> Feedback or OKs?
And here is a diff for -stable (still building here). OK provided that
it builds?
Caspar
Index: meta/tor-browser/Makefile
===================================================================
RCS file: /cvs/ports/meta/tor-browser/Makefile,v
retrieving revision 1.53.2.2
diff -u -p -r1.53.2.2 Makefile
--- meta/tor-browser/Makefile 24 May 2022 14:23:10 -0000 1.53.2.2
+++ meta/tor-browser/Makefile 8 Jun 2022 18:51:32 -0000
@@ -2,11 +2,11 @@ COMMENT= Tor Browser meta package
MAINTAINER= Caspar Schutijser <cas...@schutijser.com>
-PKGNAME= tor-browser-11.0.13
+PKGNAME= tor-browser-11.0.14
ONLY_FOR_ARCHS = amd64
-RUN_DEPENDS= www/tor-browser/browser>=11.0.13 \
- www/tor-browser/noscript>=11.4.5 \
+RUN_DEPENDS= www/tor-browser/browser>=11.0.14 \
+ www/tor-browser/noscript>=11.4.6 \
net/tor>=0.4.7.7
.include <bsd.port.mk>
Index: www/tor-browser/Makefile.inc
===================================================================
RCS file: /cvs/ports/www/tor-browser/Makefile.inc,v
retrieving revision 1.51.2.2
diff -u -p -r1.51.2.2 Makefile.inc
--- www/tor-browser/Makefile.inc 24 May 2022 14:23:10 -0000 1.51.2.2
+++ www/tor-browser/Makefile.inc 8 Jun 2022 18:51:32 -0000
@@ -3,7 +3,7 @@ HOMEPAGE ?= https://www.torproject.org
PERMIT_PACKAGE ?= Yes
CATEGORIES = www
BROWSER_NAME = tor-browser
-TB_VERSION = 11.0.13
+TB_VERSION = 11.0.14
TB_PREFIX = tb
SUBST_VARS += BROWSER_NAME TB_VERSION
Index: www/tor-browser/browser/Makefile
===================================================================
RCS file: /cvs/ports/www/tor-browser/browser/Makefile,v
retrieving revision 1.78.2.2
diff -u -p -r1.78.2.2 Makefile
--- www/tor-browser/browser/Makefile 24 May 2022 14:23:10 -0000 1.78.2.2
+++ www/tor-browser/browser/Makefile 8 Jun 2022 18:51:32 -0000
@@ -15,7 +15,7 @@ EXTRACT_SUFX = .tar.xz
PATCHORIG = .pat.orig
PKGNAME = ${TB_PREFIX}-browser-${TB_VERSION}
-DISTNAME = src-firefox-tor-browser-91.9.0esr-11.0-1-build2
+DISTNAME = src-firefox-tor-browser-91.10.0esr-11.0-1-build1
FIX_EXTRACT_PERMISSIONS = Yes
EXTRACT_ONLY += ${DISTNAME}.tar.xz \
Index: www/tor-browser/browser/distinfo
===================================================================
RCS file: /cvs/ports/www/tor-browser/browser/distinfo,v
retrieving revision 1.49.2.2
diff -u -p -r1.49.2.2 distinfo
--- www/tor-browser/browser/distinfo 24 May 2022 14:23:10 -0000 1.49.2.2
+++ www/tor-browser/browser/distinfo 8 Jun 2022 18:51:32 -0000
@@ -1,8 +1,8 @@
SHA256 (mozilla/https-everywhere-2021.4.15-eff.xpi) =
fl9ygI6hSL7M1BbsvfM+oevEOkMuTnhbXl4TObeitwg=
-SHA256 (mozilla/src-firefox-tor-browser-91.9.0esr-11.0-1-build2.tar.xz) =
Oqn4Pg3bYanVRz4Iav2164Wue6MpWXIpwwLqp4SnWuc=
+SHA256 (mozilla/src-firefox-tor-browser-91.10.0esr-11.0-1-build1.tar.xz) =
04NnD5ZDiIpA/6MaDQ40df1Y/1Qf+oLe8+U4q6mXiKI=
SHA256 (mozilla/src-tor-launcher-0.2.33.tar.xz) =
ZG7lH5mBhkCRA26AEdCo52HP0iNlHKbRKl/BKyP0C9U=
-SHA256 (mozilla/tor-browser-linux64-11.0.13_en-US.tar.xz) =
32H9kLfBAzy7WFbz0Ha1yhnyfpPBqEdBvYOwGd/n/w4=
+SHA256 (mozilla/tor-browser-linux64-11.0.14_en-US.tar.xz) =
tgaST9+CN+aXz5XCKRidpYdcGQh11yl2llXHtnrrmqY=
SIZE (mozilla/https-everywhere-2021.4.15-eff.xpi) = 1746434
-SIZE (mozilla/src-firefox-tor-browser-91.9.0esr-11.0-1-build2.tar.xz) =
413001404
+SIZE (mozilla/src-firefox-tor-browser-91.10.0esr-11.0-1-build1.tar.xz) =
413196916
SIZE (mozilla/src-tor-launcher-0.2.33.tar.xz) = 229992
-SIZE (mozilla/tor-browser-linux64-11.0.13_en-US.tar.xz) = 86606348
+SIZE (mozilla/tor-browser-linux64-11.0.14_en-US.tar.xz) = 87620816
Index: www/tor-browser/browser/files/unveil.content
===================================================================
RCS file: /cvs/ports/www/tor-browser/browser/files/unveil.content,v
retrieving revision 1.5
diff -u -p -r1.5 unveil.content
--- www/tor-browser/browser/files/unveil.content 9 Mar 2022 20:48:32
-0000 1.5
+++ www/tor-browser/browser/files/unveil.content 8 Jun 2022 18:51:32
-0000
@@ -1,4 +1,4 @@
-/dev/dri/card0 rw
+/dev/dri rw
/etc/fonts r
/etc/machine-id r
@@ -33,6 +33,7 @@ $XDG_CONFIG_HOME/fontconfig r
$XDG_CONFIG_HOME/gtk-3.0 r
$XDG_CONFIG_HOME/mimeapps.list r
$XDG_CONFIG_HOME/user-dirs.dirs r
+$XDG_CACHE_HOME/fontconfig r
$XDG_DATA_HOME/applications r
$XDG_DATA_HOME/applnk r
$XDG_DATA_HOME/fonts r
Index: www/tor-browser/noscript/Makefile
===================================================================
RCS file: /cvs/ports/www/tor-browser/noscript/Makefile,v
retrieving revision 1.41.2.1
diff -u -p -r1.41.2.1 Makefile
--- www/tor-browser/noscript/Makefile 9 May 2022 16:08:48 -0000 1.41.2.1
+++ www/tor-browser/noscript/Makefile 8 Jun 2022 18:51:32 -0000
@@ -1,5 +1,5 @@
ADDON_NAME = noscript
-V = 11.4.5
+V = 11.4.6
COMMENT = Tor Browser add-on: flexible JS blocker
HOMEPAGE = https://noscript.net
MASTER_SITES = https://secure.informaction.com/download/releases/
Index: www/tor-browser/noscript/distinfo
===================================================================
RCS file: /cvs/ports/www/tor-browser/noscript/distinfo,v
retrieving revision 1.36.2.1
diff -u -p -r1.36.2.1 distinfo
--- www/tor-browser/noscript/distinfo 9 May 2022 16:08:48 -0000 1.36.2.1
+++ www/tor-browser/noscript/distinfo 8 Jun 2022 18:51:32 -0000
@@ -1,2 +1,2 @@
-SHA256 (noscript-11.4.5.xpi) = KkOQG/25JQ0wuAXnes2aNEulV7wyWtb8T5XIDLohuEA=
-SIZE (noscript-11.4.5.xpi) = 903018
+SHA256 (noscript-11.4.6.xpi) = X5F+VKUtcmmVmXbrtutB8aFMBHww1fe9akAf5BJvCzo=
+SIZE (noscript-11.4.6.xpi) = 915963
