diff --git a/.chromium.metadata b/.chromium.metadata
index 1f09f8d0..832eb0ce 100644
--- a/.chromium.metadata
+++ b/.chromium.metadata
@@ -1,4 +1,4 @@
-063fb3c6934be16edcc2faa0745ebe6130c6df84  SOURCES/chromium-129.0.6668.70.tar.xz
+66e9f8669d63ef2e81e039d0c2368a8e04858df6  SOURCES/chromium-129.0.6668.89.tar.xz
 ccd15016324e640c40f6fc01ab076dc52196ea54  SOURCES/msspi-e91bd46306cc7044b2903cd07b788c13c36481e3.tar.xz
 3b3602227af2be24789daeedf42ae02c2f6e29e9  SOURCES/Chromium-Gost-124a371049d7a087a24f25ee4c5ed51c897a157b.tar.xz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz
diff --git a/.gitignore b/.gitignore
index f04e2bf9..5b77fb0e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,4 @@
-SOURCES/chromium-129.0.6668.70.tar.xz
+SOURCES/chromium-129.0.6668.89.tar.xz
 SOURCES/linux-x64-0.19.2.tgz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/node-v20.6.1-linux-x64.tar.xz
diff --git a/SOURCES/chromium-127-rust-clanglib.patch b/SOURCES/chromium-127-rust-clanglib.patch
index 55b3ce73..ed4d6c02 100644
--- a/SOURCES/chromium-127-rust-clanglib.patch
+++ b/SOURCES/chromium-127-rust-clanglib.patch
@@ -46,7 +46,7 @@ diff -up chromium-121.0.6167.57/build/config/clang/BUILD.gn.rust-clang_lib chrom
 +          assert(false)  # Unhandled cpu type
 +        }
 +        # different clang lib dir in fedora/epel
-+        if (clang_version == "17" || clang_version == "18") {
++        if (clang_version == "17" || clang_version == "18" || clang_version == "19") {
 +          _suffix = ""
 +        } else if (clang_version == "14" || clang_version == "15" || clang_version == "16") {
 +          _libprefix = "64"
diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec
index 45bda280..a811dd31 100644
--- a/SPECS/chromium.spec
+++ b/SPECS/chromium.spec
@@ -313,7 +313,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 129.0.6668.70
+Version: 129.0.6668.89
 Release: 1%{?dist}.inferit
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -2103,6 +2103,13 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %endif
 
 %changelog
+* Thu Oct  3 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 129.0.6668.89-1.inferit
+- update to 129.0.6668.89
+  * High CVE -2024-7025: Integer overflow in Layout
+  * High CVE-2024-9369: Insufficient data validation in Mojo
+  * High CVE-2024-9370: Inappropriate implementation in V8
+- Added clang 19 support
+
 * Wed Sep 25 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 129.0.6668.70-1.inferit
 - update to 129.0.6668.70
   * High CVE-2024-9120: Use after free in Dawn