diff --git a/download b/download
index 9c62d73a3690135779257941d0cbd461c0c6eba4..9b8f15e1fdfefccc13b613b521ede794389456ae 100644
--- a/download
+++ b/download
@@ -1,4 +1,4 @@
-d8d9076132588e326ffea4ea11b7ec40  firefox-128.13.0esr.source.tar.xz
-8b55dd5153ae218d5ea0159099878394  firefox-langpacks-128.13.0esr-20250715.tar.xz
+4a9919666c93bfa29e2878ca5fb1c0c9  firefox-128.14.0esr.source.tar.xz
+824e766472af737ea731e12d66470c20  firefox-langpacks-128.14.0esr-20250815.tar.xz
 fc25f988b87b5187d4e2f006efa699a3  cbindgen-vendor.tar.xz
 b3c1d2ea615cb0195f4f62b005773262  mochitest-python.tar.gz
diff --git a/firefox.spec b/firefox.spec
index 007aca9b7b82f02725c285b61205c06557510296..9922ca4a6439e221af3e4639bf3220b08d04ea33 100644
--- a/firefox.spec
+++ b/firefox.spec
@@ -1,4 +1,4 @@
-%define anolis_release 2
+%define anolis_release 1
 %define homepage %(grep '^HOME_URL\s*=' /etc/os-release | sed 's/^HOME_URL\s*=//;s/^\s*"//;s/"\s*$//')
 
 # Produce debug (non-optimized) package build. Suitable for debugging only
@@ -60,7 +60,7 @@
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        128.13.0
+Version:        128.14.0
 Release:        %{anolis_release}%{?dist}
 URL:            https://www.mozilla.org/firefox/
 License:        MPLv1.1 or GPLv2+ or LGPLv2+
@@ -72,7 +72,7 @@ License:        MPLv1.1 or GPLv2+ or LGPLv2+
 # Link to original tarball: https://archive.mozilla.org/pub/firefox/releases/%%{version}%%{?pre_version}/source/firefox-%%{version}%%{?pre_version}.source.tar.xz
 Source0:        https://ftp.mozilla.org/pub/firefox/releases/%{version}esr/source/firefox-%{version}esr.source.tar.xz
 %if %{with langpacks}
-Source1:        firefox-langpacks-%{version}%{?pre_version}-20250715.tar.xz
+Source1:        firefox-langpacks-%{version}%{?pre_version}-20250815.tar.xz
 %endif
 Source2:        cbindgen-vendor.tar.xz
 Source3:        process-official-tarball
@@ -1577,6 +1577,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 
 #---------------------------------------------------------------------
 %changelog
+* Fri Aug 29 2025 wenxin <wx02272781@alibaba-inc.com> - 128.14.0-1
+- Update to 128.14.0 to fix CVE-2025-9179,CVE-2025-9180,CVE-2025-9181,CVE-2025-9185
+
 * Thu Aug 21 2025 mgb01105731 <mgb01105731@alibaba-inc.com> - 128.13.0-2
 - Fix err that index.html not found