diff --git a/www/tor-browser/Makefile b/www/tor-browser/Makefile
index c79768f427db..167a776825b6 100644
--- a/www/tor-browser/Makefile
+++ b/www/tor-browser/Makefile
@@ -1,173 +1,173 @@
 PORTNAME=	tor-browser
-DISTVERSION=	14.0.7
+DISTVERSION=	14.0.9
 CATEGORIES=	www net security wayland
 MASTER_SITES=	TOR \
 		LOCAL/vvd \
 		LOCAL/vvd:source1 \
 		https://build-sources.tbb.torproject.org/:source1 \
 		LOCAL/jsm:source2 \
 		LOCAL/vvd:source2 \
 		LOCAL/vvd:source3 \
 		https://secure.informaction.com/%SUBDIR%/:source3
 MASTER_SITE_SUBDIR=	torbrowser/${DISTVERSION}/:DEFAULT \
 			download/releases/:source3
-DISTNAME=	src-firefox-tor-browser-128.8.0esr-14.0-1-build2
+DISTNAME=	src-firefox-tor-browser-128.9.0esr-14.0-2-build2
 NOSCRIPT=	noscript-12.1.1.xpi
 DISTFILES=	${DISTNAME}.tar.xz \
 		manual_215922.zip:source1 \
 		fonts-3--4348e1.tar.zst:source2 \
 		${NOSCRIPT}:source3
 
 MAINTAINER=	freebsd@sysctl.cz
 COMMENT=	Tor Browser for FreeBSD
 WWW=		https://www.torproject.org/
 
 LICENSE=	MPL20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BUILD_DEPENDS=	nspr>=4.32:devel/nspr \
 		nss>=3.101:security/nss \
 		icu>=73.1:devel/icu \
 		libevent>=2.1.8:devel/libevent \
 		harfbuzz>=8.5.0:print/harfbuzz \
 		graphite2>=1.3.14:graphics/graphite2 \
 		png>=1.6.43:graphics/png \
 		dav1d>=1.0.0:multimedia/dav1d \
 		libvpx>=1.14:multimedia/libvpx \
 		${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \
 		v4l_compat>0:multimedia/v4l_compat \
 		autoconf2.13:devel/autoconf2.13 \
 		nasm:devel/nasm \
 		yasm:devel/yasm
 RUN_DEPENDS=	tor:security/tor \
 		obfs4proxy:security/obfs4proxy-tor \
 		snowflake-client:security/snowflake-tor
 
 USES=		compiler:c++11-lib libtool localbase:ldflags perl5 pkgconfig \
 		python shebangfix tar:xz
 USE_GECKO=	gecko
 USE_GITHUB=	nodefault
 TAG_L10N=	fcd0300e8478d1ec4d1c097a073ddb8e1e0351e3
 GH_TUPLE=	mozilla-l10n:firefox-l10n:${TAG_L10N}:ffl10n
 USE_GITLAB=	nodefault
 GL_SITE=	https://gitlab.torproject.org/
 GL_ACCOUNT=	tpo
 GL_PROJECT=	translation:basebrowser translation:torbrowser
-TAG_BASE=	93eddbd3888852c09e130d536fb3c9bd7e4e6f57
-TAG_TOR=	e7a334a4adb16e506515940e81f41964ef16af76
+TAG_BASE=	d687be19490caa48a46a3e2193bda95d57cbb96d
+TAG_TOR=	95b60f2679611d39b035f2e45555c2c3d64d991f
 GL_TAGNAME=	${TAG_BASE}:basebrowser ${TAG_TOR}:torbrowser
 USE_MOZILLA=	-sqlite
 
 LOCALES=	ar ca cs da de el es-ES fa fi fr ga-IE he hu id is it ja ka ko \
 		lt mk ms my nb-NO nl pl pt-BR ro ru sq sv-SE th tr uk vi zh-CN \
 		zh-TW
 CONFIGURE_ENV+=	BINDGEN_CFLAGS="-I${LOCALBASE}/include" \
 		MOZ_CHROME_MULTILOCALE="${LOCALES}"
 
 MAKE_ENV+=	LOCALES="${LOCALES}"
 
 CFLAGS_powerpc64le=	-DSQLITE_BYTEORDER=1234
 SSP_UNSAFE=		yes
 
 BUNDLE_LIBS=	yes
 SUB_FILES=	fonts.conf tor-browser.desktop torrc-defaults
 
 WRKSRC=		${WRKDIR}/${DISTNAME:S/src-//}
 
 MOZ_EXPORT+=	MOZ_TELEMETRY_REPORTING="" \
 		MOZILLA_OFFICIAL="1" \
 		MOZ_OFFICIAL_BRANDING="1" \
 		MOZ_APP_DISPLAYNAME="Tor Browser" \
 		MOZ_APP_NAME="tor-browser" \
 		MOZ_CHROME_MULTILOCALE="${LOCALES}"
 
 MOZ_OPTIONS=	--with-base-browser-version=${DISTVERSION} \
 		--enable-official-branding \
 		--enable-optimize \
 		--enable-bundled-fonts \
 		--disable-tests \
 		--disable-debug \
 		--disable-crashreporter \
 		--disable-webrtc \
 		--disable-parental-controls \
 		--enable-proxy-bypass-protection \
 		--disable-system-policies \
 		--disable-backgroundtasks \
 		--with-distribution-id=org.torproject \
 		--with-branding=browser/branding/tb-release
 
 .include "${.CURDIR}/../../www/firefox/Makefile.options"
 
 .include <bsd.port.options.mk>
 
 .if ${ARCH} == amd64
 MOZ_OPTIONS+=	--enable-rust-simd
 .endif
 .if ${ARCH} == powerpc64
 MOZ_OPTIONS+=	--without-wasm-sandboxed-libraries
 .else
 BUILD_DEPENDS+=	${LOCALBASE}/share/wasi-sysroot/lib/wasm32-wasi/libc++abi.a:devel/wasi-libcxx${LLVM_VERSION} \
 		${LOCALBASE}/share/wasi-sysroot/lib/wasm32-wasi/libc.a:devel/wasi-libc@${LLVM_VERSION} \
 		wasi-compiler-rt${LLVM_VERSION}>0:devel/wasi-compiler-rt${LLVM_VERSION}
 MOZILLA_PLIST_DIRS=	bin lib share/applications share/pixmaps \
 			share/tor-browser
 MOZ_OPTIONS+=	--with-wasi-sysroot=${LOCALBASE}/share/wasi-sysroot
 .endif
 post-patch:
 	@${REINPLACE_CMD} 's|LOCALBASE|${LOCALBASE}|g' \
 		"${WRKSRC}/browser/app/profile/000-tor-browser.js"
 	@${REINPLACE_CMD} 's|%%LOCALBASE%%|${LOCALBASE}|g' \
 		${WRKSRC}/browser/app/nsBrowserApp.cpp
 	${MKDIR} ${WRKSRC}/tmp-manual
 	${UNZIP_NATIVE_CMD} -d ${WRKSRC}/tmp-manual ${DISTDIR}/manual_215922.zip
 pre-configure:
 	@${REINPLACE_CMD} 's|export MOZ_GOOGLE_.*||g' ${WRKSRC}/.mozconfig
 	${PYTHON_CMD} ${FILESDIR}/packagemanual.py ${WRKSRC}/tmp-manual/public \
 		${WRKSRC}/browser/base/content/manual
 post-configure:
 	${MKDIR} ${WRKDIR}/.mozbuild/l10n-central
 	${CP} -r ${WRKDIR}/firefox-l10n-${TAG_L10N}/* \
 		${WRKDIR}/.mozbuild/l10n-central
 
 .for i in ${LOCALES}
 	${CP} ${WRKDIR}/translation-${TAG_BASE}/${i}/base-browser.ftl \
 		${WRKDIR}/.mozbuild/l10n-central/${i}/toolkit/toolkit/global/
 	${CP} ${WRKDIR}/translation-${TAG_BASE}/${i}/newIdentity.properties \
 		${WRKDIR}/.mozbuild/l10n-central/${i}/browser/chrome/browser/
 	${CP} ${WRKDIR}/translation-${TAG_BASE}/${i}/securityLevel.properties \
 		${WRKDIR}/.mozbuild/l10n-central/${i}/browser/chrome/browser/
 	${CP} ${WRKDIR}/translation-${TAG_TOR}/${i}/tor-browser.ftl \
 		${WRKDIR}/.mozbuild/l10n-central/${i}/toolkit/toolkit/global/
 	${MKDIR} ${WRKSRC}/toolkit/torbutton/chrome/locale/${i}/
 .for j in aboutTBUpdate.dtd brand.dtd brand.properties onionLocation.properties \
 	settings.properties torConnect.properties torbutton.dtd \
 	torbutton.properties torlauncher.properties
 	${CP} ${WRKDIR}/translation-${TAG_TOR}/${i}/${j} \
 		${WRKSRC}/toolkit/torbutton/chrome/locale/${i}/
 .endfor
 	${CP} -r ${WRKDIR}/translation-${TAG_TOR}/${i}/branding \
 		${WRKSRC}/toolkit/torbutton/chrome/locale/${i}
 .endfor
 
 post-build:
 	MOZBUILD_STATE_PATH=${WRKDIR}/.mozbuild AB_CD="multi" MOZ_AUTOMATION="1" \
 		PATH="`find ${WRKRDIR}/.mozbuild/srcdirs -name build -type d -print`/bin:${PATH}" \
 		${WRKSRC}/mach package-multi-locale --locales ${LOCALES}
 
 post-install:
 	@${MKDIR} ${STAGEDIR}${DATADIR}
 	${INSTALL_DATA} ${WRKDIR}/torrc-defaults \
 		${STAGEDIR}${DATADIR}/torrc-defaults
 	${INSTALL_DATA} ${WRKDIR}/tor-browser.desktop \
 		${STAGEDIR}${PREFIX}/share/applications/tor-browser.desktop
 	${MKDIR} ${STAGEDIR}${PREFIX}/lib/tor-browser/fontconfig
 	${MKDIR} ${STAGEDIR}${PREFIX}/lib/tor-browser/fonts
 	${INSTALL_DATA} ${WRKDIR}/fonts.conf \
 		${STAGEDIR}${PREFIX}/lib/tor-browser/fontconfig/fonts.conf
 	(cd ${WRKDIR}/fonts && \
 		${COPYTREE_SHARE} "*.otf *.ttf" ${STAGEDIR}${PREFIX}/lib/tor-browser/fonts)
 	${MKDIR} ${STAGEDIR}${PREFIX}/lib/tor-browser/distribution/extensions
 	${INSTALL_DATA} ${DISTDIR}/${NOSCRIPT} \
 		"${STAGEDIR}${PREFIX}/lib/tor-browser/distribution/extensions/{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi"
 
 .include <bsd.port.mk>
diff --git a/www/tor-browser/distinfo b/www/tor-browser/distinfo
index 2a8ae0f20420..e365e4165ca4 100644
--- a/www/tor-browser/distinfo
+++ b/www/tor-browser/distinfo
@@ -1,15 +1,15 @@
-TIMESTAMP = 1741166750
-SHA256 (src-firefox-tor-browser-128.8.0esr-14.0-1-build2.tar.xz) = 97c3ac6e1b66fff4f36ab272a9abdba961d7586f393ef49625996dd5327fac40
-SIZE (src-firefox-tor-browser-128.8.0esr-14.0-1-build2.tar.xz) = 610970776
+TIMESTAMP = 1743542861
+SHA256 (src-firefox-tor-browser-128.9.0esr-14.0-2-build2.tar.xz) = d9efda416ef46206ff09a8d1e57d26e1a589f3515059eabd3a538acca39206cb
+SIZE (src-firefox-tor-browser-128.9.0esr-14.0-2-build2.tar.xz) = 610985616
 SHA256 (manual_215922.zip) = b5ed703f54d52e9f197320f3698e936d585a3fed23cc4f9fbf59edce2869f885
 SIZE (manual_215922.zip) = 28305786
 SHA256 (fonts-3--4348e1.tar.zst) = 7fbbecece6de777f196982f6eb567970a6d8e7ac2bf5b1ad6b90e1ea36374032
 SIZE (fonts-3--4348e1.tar.zst) = 27441580
 SHA256 (noscript-12.1.1.xpi) = f9639e63ffcfc352036de00e4ff6694bb0ca65a0bb8fbd103bd08f32dc1ff31a
 SIZE (noscript-12.1.1.xpi) = 980626
 SHA256 (mozilla-l10n-firefox-l10n-fcd0300e8478d1ec4d1c097a073ddb8e1e0351e3_GH0.tar.gz) = d07ecc7fe021998b523357849f71d52c9cb5248cb79bba29793e1ba353bae5bb
 SIZE (mozilla-l10n-firefox-l10n-fcd0300e8478d1ec4d1c097a073ddb8e1e0351e3_GH0.tar.gz) = 68409826
-SHA256 (tpo-translation-93eddbd3888852c09e130d536fb3c9bd7e4e6f57_GL0.tar.gz) = fd1a844962a1c85a398b7f08d39098aa47c6447b24551905c37faad6e1069bef
-SIZE (tpo-translation-93eddbd3888852c09e130d536fb3c9bd7e4e6f57_GL0.tar.gz) = 770323
-SHA256 (tpo-translation-e7a334a4adb16e506515940e81f41964ef16af76_GL0.tar.gz) = 9083acc07e236380debe5d42f4a21b922fde9f3503ef320da003eb2f0fd7834e
-SIZE (tpo-translation-e7a334a4adb16e506515940e81f41964ef16af76_GL0.tar.gz) = 2596403
+SHA256 (tpo-translation-d687be19490caa48a46a3e2193bda95d57cbb96d_GL0.tar.gz) = e651d509d678f8a5b69f76a37168735e7fb757d7d58008248296214f4bf5ef7c
+SIZE (tpo-translation-d687be19490caa48a46a3e2193bda95d57cbb96d_GL0.tar.gz) = 773319
+SHA256 (tpo-translation-95b60f2679611d39b035f2e45555c2c3d64d991f_GL0.tar.gz) = d8381771f306c5956da6d7f6c84e9d975e049beaad7a1b1569545566ea100420
+SIZE (tpo-translation-95b60f2679611d39b035f2e45555c2c3d64d991f_GL0.tar.gz) = 2829560