diff --git a/firefox-128.4.0esr.source.tar.xz.asc b/firefox-128.4.0esr.source.tar.xz.asc
deleted file mode 100644
index f31df85c35dde0ed07a284ad71f8e2b13f69a473..0000000000000000000000000000000000000000
--- a/firefox-128.4.0esr.source.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmcW7IkACgkQ4207E/PZ
-MnTf9A//VlyClh8iW411Zun0qF0f6+AdI9zav9/c2Ow3BLAs2voKC/dQT4QQpdHl
-EMYqxP09c+voLeAcHQnrPIZh5W181a/WlawfGnJC5g6O9zMBovSUsNjpE+fQTcY0
-z8+qbEmYnZz8KGW9iVLdpQWDsXpwaHNKIRkAxbhFQobRbtmnODOafcAzP3kYpvPL
-8Ar+6rvVLdaGGJzfvCcH4fAFaWKIYpfAzcjAgpsftypm2yx9xUBogfmSoGJOKT8L
-WVl2dRmLkWXcweJKYBhNEt/fpNsb14/AL0Ct2x+IFUQ/V+iU2TgqG6xYTHvYoO3b
-7sHR4kM7hZs2uVQfDqCC6eVI6mbaB9vpC7kwsFBVGBrq9wJv0xG5ebAYzwOOJZWo
-RudaWnekHfPifV3g7HhDtSE0RWqPpPEXLHkOnvexsq7uVFYhQSahof7VhYsyWfa3
-EZEnzSgPiURbQ56Jld/jfHaq/z6hZKT4IL7uziv5AhH4rLezhb6ttLQIcZ67byxP
-IVM74OGRKMLyOla3+QqabWpcHdbC+FIys765klMLWvdGpPQFPXDsMhEU7gieGekf
-AvFpHIjUofyVPn0ezeuHpk9mwsWiTnCDfI7Xdr9TQG2G+ArzHH8HrPhkoL8hqxX/
-Lw16iMg/KJ9MNWiLAOzgt2xhPQS+LPDOpFzXla2W133TZKK0Nm4=
-=cjvX
------END PGP SIGNATURE-----
diff --git a/firefox-128.4.0esr.source.tar.xz b/firefox-128.5.0esr.source.tar.xz
similarity index 32%
rename from firefox-128.4.0esr.source.tar.xz
rename to firefox-128.5.0esr.source.tar.xz
index e10c68b51d0a1e464cffb25439ee196801dc109c..c19380fd895142b827a6963f88c0e05bba900220 100644
--- a/firefox-128.4.0esr.source.tar.xz
+++ b/firefox-128.5.0esr.source.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:074014e1c26144e10707b12a271176a4b6b67021e91444b613edae38d188febc
-size 558619512
+oid sha256:0bd18968314afdcc341edd2a9178e305c9d454560a42193154a0f994047fecb8
+size 567200548
diff --git a/firefox-128.5.0esr.source.tar.xz.asc b/firefox-128.5.0esr.source.tar.xz.asc
new file mode 100644
index 0000000000000000000000000000000000000000..d5ab6450f80167aa5b5ca91890217930bf127d82
--- /dev/null
+++ b/firefox-128.5.0esr.source.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=yuDr
+-----END PGP SIGNATURE-----
diff --git a/firefox-langpacks-128.4.0esr.tar.xz b/firefox-langpacks-128.5.0esr.tar.xz
similarity index 32%
rename from firefox-langpacks-128.4.0esr.tar.xz
rename to firefox-langpacks-128.5.0esr.tar.xz
index ac86abd14072eb46dea8637408094bbd345fe270..b15ef70f1ada9cd58b8c8cc58bbad7aebe7ba89a 100644
--- a/firefox-langpacks-128.4.0esr.tar.xz
+++ b/firefox-langpacks-128.5.0esr.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:c2bf736d5fc09ec6049dbaae1c252416e48796f0431cf714fdac32e3671dc3a3
-size 51480900
+oid sha256:862460caf1ac87cec30a0fb2d6a36fb4a66e3c43aa83633f9e0d0bc64ff1ef2c
+size 51621256
diff --git a/firefox.spec b/firefox.spec
index d72780ed6f218f5930e8896447b65b5853af1300..10375c313219f5a1cf05b484ca31d5fc4fb4b80d 100644
--- a/firefox.spec
+++ b/firefox.spec
@@ -44,8 +44,8 @@
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        128.4.0
-Release:        3
+Version:        128.5.0
+Release:        1
 URL:            https://www.mozilla.org/firefox/
 License:        MPL-1.1 or GPL-2.0-or-later or LGPL-2.0-or-later
 Source0:        https://ftp.mozilla.org/pub/firefox/releases/%{version}esr/source/firefox-%{version}esr.source.tar.xz
@@ -925,6 +925,11 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 %endif
 
 %changelog
+* Tue Dec 03 2024 wangkai <13474090681@163.com> - 128.5.0-1
+- Update to 128.5.0
+- Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
+  CVE-2024-11697 CVE-2024-11699
+
 * Mon Nov 25 2024 zhouyi <zhouyi198@h-partners.com> - 128.4.0-3
 - Lfs url change