diff --git a/download b/download
index 77b27aaca2fa8eaf42b5958130c70f44c794662e..d44b304da1b13a826b28a7b71d10a6e30b11b6b8 100644
--- a/download
+++ b/download
@@ -1,4 +1,4 @@
-67483ac1c7f58e1a3cd7b77ff3bf5920  firefox-128.10.0esr.source.tar.xz
-8b03bd9937c0de7ec6c29282240df9b7  firefox-langpacks-128.10.0esr-20250512.tar.xz
+b0b79222aca166e362e9851805c9ba90  firefox-128.10.1esr.source.tar.xz
+247eadef646581ed920d5a6da4a7bc93  firefox-langpacks-128.10.1esr-20250519.tar.xz
 fc25f988b87b5187d4e2f006efa699a3  cbindgen-vendor.tar.xz
 b3c1d2ea615cb0195f4f62b005773262  mochitest-python.tar.gz
diff --git a/firefox.spec b/firefox.spec
index ab09dde106b584d218c6b0e08f07e8c24b98026f..314147ef4d0fc799c5b20779f8991bd325922593 100644
--- a/firefox.spec
+++ b/firefox.spec
@@ -60,7 +60,7 @@
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        128.10.0
+Version:        128.10.1
 Release:        %{anolis_release}%{?dist}
 URL:            https://www.mozilla.org/firefox/
 License:        MPLv1.1 or GPLv2+ or LGPLv2+
@@ -72,7 +72,7 @@ License:        MPLv1.1 or GPLv2+ or LGPLv2+
 # Link to original tarball: https://archive.mozilla.org/pub/firefox/releases/%%{version}%%{?pre_version}/source/firefox-%%{version}%%{?pre_version}.source.tar.xz
 Source0:        https://ftp.mozilla.org/pub/firefox/releases/%{version}esr/source/firefox-%{version}esr.source.tar.xz
 %if %{with langpacks}
-Source1:        firefox-langpacks-%{version}%{?pre_version}-20250512.tar.xz
+Source1:        firefox-langpacks-%{version}%{?pre_version}-20250519.tar.xz
 %endif
 Source2:        cbindgen-vendor.tar.xz
 Source3:        process-official-tarball
@@ -1575,6 +1575,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 
 #---------------------------------------------------------------------
 %changelog
+* Mon May 26 2025 Cheng Yang <yc02267530@alibaba-inc.com> - 128.10.1-1
+- Update to 128.10.1 to fix CVE-2025-4919
+
 * Mon May 12 2025 wenxin <wx02272781@alibaba-inc.com> - 128.10.0-1
 - Update to 128.10.0 to fix CVE-2025-2817