diff --git a/.chromium.metadata b/.chromium.metadata
index c4309bb4..5ba9010e 100644
--- a/.chromium.metadata
+++ b/.chromium.metadata
@@ -1,4 +1,4 @@
-6c74fd7c74d7d79e604fb909b8b3fbe34b7858df  SOURCES/chromium-133.0.6943.98.tar.xz
+d6df71ef3f0cb7c20fa1730a9d5e01eaea19d618  SOURCES/chromium-133.0.6943.126.tar.xz
 f0fe87c901fd8d1e44eba483b8f4d8540d780308  SOURCES/Chromium-Gost-37dd7d5b7f087dce6afa0d354f4c1303681dbe8b.tar.xz
 668e0721b89238cf10605bd02db809a9e5c3f9c7  SOURCES/msspi-7f7847892d4c69c454a58093553fa34d1b09c0a0.tar.xz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz
diff --git a/.gitignore b/.gitignore
index f72bdebf..b33b02df 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,4 @@
-SOURCES/chromium-133.0.6943.98.tar.xz
+SOURCES/chromium-133.0.6943.126.tar.xz
 SOURCES/linux-x64-0.19.2.tgz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/node-v20.6.1-linux-x64.tar.xz
diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec
index 252a2dd7..08ee72f6 100644
--- a/SPECS/chromium.spec
+++ b/SPECS/chromium.spec
@@ -308,7 +308,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 133.0.6943.98
+Version: 133.0.6943.126
 Release: 1%{?dist}.inferit
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1984,6 +1984,12 @@ fi
 %endif
 
 %changelog
+* Thu Feb 20 2025 Arkady L. Shane <tigro@msvsphere-os.ru> - 133.0.6943.126-1.inferit
+- Update to 133.0.6943.126
+  * CVE-2025-0999: Heap buffer overflow in V8
+  * CVE-2025-1426: Heap buffer overflow in GPU
+  * CVE-2025-1006: Use after free in Network
+
 * Fri Feb 14 2025 Arkady L. Shane <tigro@msvsphere-os.ru> - 133.0.6943.98-1.inferit
 - Update to 133.0.6943.98
   * CVE-2025-0995: Use after free in V8