diff --git a/download b/download
index a9cb51a02f615cbb9108bfd5998e334d6871e70d..dedd7b820d1a1976e577d7cd8211717e3ea30a29 100644
--- a/download
+++ b/download
@@ -1,6 +1,6 @@
 fc25f988b87b5187d4e2f006efa699a3  cbindgen-vendor.tar.xz
-9d0b2cc714eea032f6f4f89404e3e352  firefox-128.11.0esr.processed-source.tar.xz
-bb3aec0b2ceb191de3963bdc50edf0e4  firefox-langpacks-128.11.0esr-20250521.tar.xz
+4b533ae53bd0e98cdb04d3f8aa5fb102  firefox-128.12.0esr.processed-source.tar.xz
+9daf6664ce7e0fe2f18a07f304b8d5c5  firefox-langpacks-128.12.0esr-20250617.tar.xz
 b3c1d2ea615cb0195f4f62b005773262  mochitest-python.tar.gz
 2d901c7a62fc68bbd8816e8c4c6276c1  wasi-sdk-20.tar.gz
 7b35b9a003996b1f1dbc3cd936a609f2  nspr-4.35.0-1.el8_1.src.rpm
diff --git a/firefox.spec b/firefox.spec
index 3da603e68268326bca2ec495c3b4359df3b37c91..f837d6d93066fe4a7c7783e44bc37e8a29bb51e7 100644
--- a/firefox.spec
+++ b/firefox.spec
@@ -167,7 +167,7 @@ end}
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        128.11.0
+Version:        128.12.0
 Release:        1%{anolis_release}%{?dist}
 URL:            https://www.mozilla.org/firefox/
 License:        MPLv1.1 or GPLv2+ or LGPLv2+
@@ -200,7 +200,7 @@ ExcludeArch:    aarch64 s390 ppc
 # Link to original tarball: https://archive.mozilla.org/pub/firefox/releases/%%{version}%%{?pre_version}/source/firefox-%%{version}%%{?pre_version}.source.tar.xz
 Source0:        firefox-%{version}%{?pre_version}%{?buildnum}.processed-source.tar.xz
 %if %{with langpacks}
-Source1:        firefox-langpacks-%{version}%{?pre_version}-20250521.tar.xz
+Source1:        firefox-langpacks-%{version}%{?pre_version}-20250617.tar.xz
 %endif
 Source2:        cbindgen-vendor.tar.xz
 Source3:        process-official-tarball
@@ -1578,6 +1578,13 @@ MOZ_OPT_FLAGS="$MOZ_OPT_FLAGS -DNSS_PKCS11_3_0_STRICT"
 
 echo "export CFLAGS=\"$MOZ_OPT_FLAGS\"" >> .mozconfig
 echo "export CXXFLAGS=\"$MOZ_OPT_FLAGS\"" >> .mozconfig
+%ifarch aarch64
+echo "export ASFLAGS=\"-mbranch-protection=standard\"" >> .mozconfig
+%endif
+%ifarch x86_64
+echo "export ASFLAGS=\"-fcf-protection=full\"" >> .mozconfig
+%endif
+
 echo "export LDFLAGS=\"$MOZ_LINK_FLAGS\"" >> .mozconfig
 echo "export CC=gcc" >> .mozconfig
 echo "export CXX=g++" >> .mozconfig
@@ -1992,11 +1999,14 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 #---------------------------------------------------------------------
 
 %changelog
-* Fri May 30 2025 Liwei Ge <geliwei@openanolis.org> - 128.11.1-1.0.1
+* Wed Jul 02 2025 Liwei Ge <geliwei@openanolis.org> - 128.12.0-1.0.1
 - Add firefox-anolis-default-prefs.js
 - Remove bookmarks and loongarch64
 - Add BuildRequires gcc-toolset-13-gcc-c++
 
+* Tue Jun 17 2025 Eike Rathke <erack@redhat.com> - 128.12.0-1
+- Update to 128.12.0 build1
+
 * Wed May 21 2025 Eike Rathke <erack@redhat.com> - 128.11.0-1
 - Update to 128.11.0