diff --git a/.chromium.metadata b/.chromium.metadata
index bb3bb793..407a9e70 100644
--- a/.chromium.metadata
+++ b/.chromium.metadata
@@ -1,4 +1,4 @@
-632b3a2df226a3c2db84c8a9459e08999b9b080d  SOURCES/chromium-127.0.6533.88.tar.xz
+37d022fd3347653b81c0c3159814438118aa9282  SOURCES/chromium-127.0.6533.99.tar.xz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz
 7e5d2c7864c5c83ec789b59c77cd9c20d2594916  SOURCES/linux-arm64-0.19.2.tgz
 769196d081c6a0ad37f1c63dec56febfff3370de  SOURCES/node-v20.6.1-linux-x64.tar.xz
diff --git a/.gitignore b/.gitignore
index 3851ec70..671a6c76 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,4 @@
-SOURCES/chromium-127.0.6533.88.tar.xz
+SOURCES/chromium-127.0.6533.99.tar.xz
 SOURCES/linux-x64-0.19.2.tgz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/node-v20.6.1-linux-x64.tar.xz
diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec
index 54909ba1..21462951 100644
--- a/SPECS/chromium.spec
+++ b/SPECS/chromium.spec
@@ -337,8 +337,8 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 127.0.6533.88
-Release: 3%{?dist}.inferit
+Version: 127.0.6533.99
+Release: 1%{?dist}.inferit
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
 License: BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
@@ -2200,6 +2200,15 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %endif
 
 %changelog
+* Wed Aug 07 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 127.0.6533.99-1.inferit
+- update to 127.0.6533.99
+  * Critical CVE-2024-7532: Out of bounds memory access in ANGLE
+  * High CVE-2024-7533: Use after free in Sharing
+  * High CVE-2024-7550: Type Confusion in V8
+  * High CVE-2024-7534: Heap buffer overflow in Layout
+  * High CVE-2024-7535: Inappropriate implementation in V8
+  * High CVE-2024-7536: Use after free in WebAudio
+
 * Wed Aug 07 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 127.0.6533.88-3.inferit
 - fix rhbz#2294773 - Allow enabling vulkan on ozone wayland for AMD vaapi
 - add ppc64le patch to fix runtime assertion trap on ppc64el systems