diff --git a/.chromium.metadata b/.chromium.metadata
index 857c7b93..a90e2ab1 100644
--- a/.chromium.metadata
+++ b/.chromium.metadata
@@ -1,4 +1,4 @@
-045d87e42e9a0d2386a3902505bbf355bd9bf43c  SOURCES/chromium-120.0.6099.109.tar.xz
+fed3dd1bc4e700d32ffb6ed7b499b81a4270a166  SOURCES/chromium-120.0.6099.129.tar.xz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz
 7e5d2c7864c5c83ec789b59c77cd9c20d2594916  SOURCES/linux-arm64-0.19.2.tgz
 769196d081c6a0ad37f1c63dec56febfff3370de  SOURCES/node-v20.6.1-linux-x64.tar.xz
diff --git a/.gitignore b/.gitignore
index 09edbe1d..68a52c1c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,4 @@
-SOURCES/chromium-120.0.6099.109.tar.xz
+SOURCES/chromium-120.0.6099.129.tar.xz
 SOURCES/linux-x64-0.19.2.tgz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/node-v20.6.1-linux-x64.tar.xz
diff --git a/SOURCES/chromium-120-missing-header-files.patch b/SOURCES/chromium-120-missing-header-files.patch
index 377de0d1..4d3f3ef3 100644
--- a/SOURCES/chromium-120-missing-header-files.patch
+++ b/SOURCES/chromium-120-missing-header-files.patch
@@ -457,3 +457,14 @@ diff -up chromium-119.0.6045.105/ui/gfx/linux/drm_util_linux.h.missing-header-fi
  namespace ui {
  
  int GetFourCCFormatFromBufferFormat(gfx::BufferFormat format);
+diff -up chromium-120.0.6099.109/chrome/test/chromedriver/chrome/chrome_finder.h.than chromium-120.0.6099.109/chrome/test/chromedriver/chrome/chrome_finder.h
+--- chromium-120.0.6099.109/chrome/test/chromedriver/chrome/chrome_finder.h.than	2023-12-20 23:09:10.395334723 +0100
++++ chromium-120.0.6099.109/chrome/test/chromedriver/chrome/chrome_finder.h	2023-12-20 23:09:35.436910261 +0100
+@@ -6,6 +6,7 @@
+ #define CHROME_TEST_CHROMEDRIVER_CHROME_CHROME_FINDER_H_
+ 
+ #include <vector>
++#include <string>
+ 
+ #include "base/functional/callback_forward.h"
+ 
diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec
index c938a6dd..73960ebf 100644
--- a/SPECS/chromium.spec
+++ b/SPECS/chromium.spec
@@ -320,7 +320,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 120.0.6099.109
+Version: 120.0.6099.129
 Release: 1%{?dist}.inferit
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1907,6 +1907,10 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %endif
 
 %changelog
+* Fri Dec 22 2023 Arkady L. Shane <tigro@msvsphere-os.ru> - 120.0.6099.129-1.inferit
+- update to 120.0.6099.129
+  * High CVE-2023-7024: Heap buffer overflow in WebRTC
+
 * Sun Dec 17 2023 Arkady L. Shane <tigro@msvsphere-os.ru> - 120.0.6099.109-1.inferit
 - update to 120.0.6099.109
    * High CVE-2023-6702: Type Confusion in V8