Review Results

Comment

The change only bumps pkgver in .SRCINFO from 15.0.20 to 15.0.23. No source URLs, checksums, build logic, install scripts, or package metadata affecting execution/persistence were changed in the reviewed hunk. On its face this is a routine version update with no security red flags in the diff provided.

@@ -1,6 +1,6 @@
 pkgbase = tor-browser-bin
 	pkgdesc = Tor Browser Bundle: anonymous browsing using Firefox and Tor
-	pkgver = 15.0.20
+	pkgver = 15.0.23
 	pkgrel = 1
 	url = https://www.torproject.org/projects/torbrowser.html
 	install = tor-browser.install

Comment

The change only updates the noextract filenames in .SRCINFO from Tor Browser 15.0.20 to 15.0.23 for the i686 and x86_64 tarballs. This is metadata-only and does not introduce new sources, commands, permissions, install scripts, or packaging behavior. No security-relevant red flags are present in the provided diff hunk.

@@ -28,8 +28,8 @@ pkgbase = tor-browser-bin
 	optdepends = libnotify: Gnome dialog boxes
 	provides = tor-browser
 	conflicts = tor-browser
-	noextract = tor-browser-linux-i686-15.0.20.tar.xz
-	noextract = tor-browser-linux-x86_64-15.0.20.tar.xz
+	noextract = tor-browser-linux-i686-15.0.23.tar.xz
+	noextract = tor-browser-linux-x86_64-15.0.23.tar.xz
 	source = tor-browser.desktop.in
 	source = tor-browser.in
 	source = tor-browser.png

Comment

The change is a straightforward version bump in .SRCINFO from Tor Browser 15.0.20 to 15.0.23 for both i686 and x86_64, with updated upstream archive URLs and matching SHA-256 checksums. Sources remain on the official Tor Project archive over HTTPS, and the .asc signature files are still included. No new build-time execution, install-script behavior, or packaging metadata red flags are introduced by this diff alone.

@@ -39,13 +39,13 @@ pkgbase = tor-browser-bin
 	sha256sums = 53754c8ff0ea01d8f79d3e725fa3516511faf1e53804c67dc8f573cdb39e35a3
 	sha256sums = f25ccf68b47f5eb14c6fec0664c74f30ea9c6c58d42fc6abac3b64670aaa3152
 	sha256sums = 7b28b5dbe8ad573bb46e61b4d542b33e01ca240825ca640b4893fee6203b021f
-	source_i686 = https://archive.torproject.org/tor-package-archive/torbrowser/15.0.20/tor-browser-linux-i686-15.0.20.tar.xz
-	source_i686 = https://archive.torproject.org/tor-package-archive/torbrowser/15.0.20/tor-browser-linux-i686-15.0.20.tar.xz.asc
-	sha256sums_i686 = 8aabdf701b1514ddb926d00a0f22fde21a0bfcadeb33433ba5b2bb81b8abe590
+	source_i686 = https://archive.torproject.org/tor-package-archive/torbrowser/15.0.23/tor-browser-linux-i686-15.0.23.tar.xz
+	source_i686 = https://archive.torproject.org/tor-package-archive/torbrowser/15.0.23/tor-browser-linux-i686-15.0.23.tar.xz.asc
+	sha256sums_i686 = 117087929ae71f5ca5a296b230dfe472412960901e3d69f3994965752a95b309
 	sha256sums_i686 = SKIP
-	source_x86_64 = https://archive.torproject.org/tor-package-archive/torbrowser/15.0.20/tor-browser-linux-x86_64-15.0.20.tar.xz
-	source_x86_64 = https://archive.torproject.org/tor-package-archive/torbrowser/15.0.20/tor-browser-linux-x86_64-15.0.20.tar.xz.asc
-	sha256sums_x86_64 = d4302633d6059d2dad94e2c883b31141dc7b3daa2bfa5aabb0fd29dda18d22e9
+	source_x86_64 = https://archive.torproject.org/tor-package-archive/torbrowser/15.0.23/tor-browser-linux-x86_64-15.0.23.tar.xz
+	source_x86_64 = https://archive.torproject.org/tor-package-archive/torbrowser/15.0.23/tor-browser-linux-x86_64-15.0.23.tar.xz.asc
+	sha256sums_x86_64 = 0f62f8d65c7fc34dd4b86cbab7fcaaec7381573dda346ac7b17e568e22b4bf39
 	sha256sums_x86_64 = SKIP
 
 pkgname = tor-browser-bin

Comment

The change is a straightforward version bump in PKGBUILD from 15.0.20 to 15.0.23 with no accompanying changes to sources, build logic, install scripts, permissions, or package metadata. Based on the provided diff hunk alone, there are no new security red flags such as added network fetches, scripts, privilege changes, or suspicious dependencies. Risk is minimal.

@@ -18,7 +18,7 @@
 
 _appname='tor-browser'
 pkgname="${_appname}-bin"
-pkgver='15.0.20'
+pkgver='15.0.23'
 pkgrel=1
 pkgdesc='Tor Browser Bundle: anonymous browsing using Firefox and Tor'
 url='https://www.torproject.org/projects/torbrowser.html'