diff --git a/.chromium.metadata b/.chromium.metadata
index 2cd0e812..27cce0ed 100644
--- a/.chromium.metadata
+++ b/.chromium.metadata
@@ -1,3 +1,3 @@
-20f8c5535a45f3f40defd54d7e5e522c09beab64  SOURCES/chromium-121.0.6167.85-clean.tar.xz
+6f7d9dbb2420fc322904489501d51429dbed2762  SOURCES/chromium-121.0.6167.139-clean.tar.xz
 7e5d2c7864c5c83ec789b59c77cd9c20d2594916  SOURCES/linux-arm64-0.19.2.tgz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz
diff --git a/.gitignore b/.gitignore
index 92e705fe..7ef6d3c1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-SOURCES/chromium-121.0.6167.85-clean.tar.xz
+SOURCES/chromium-121.0.6167.139-clean.tar.xz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/linux-x64-0.19.2.tgz
diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec
index 120ab5b6..9757487a 100644
--- a/SPECS/chromium.spec
+++ b/SPECS/chromium.spec
@@ -186,12 +186,6 @@
 %global use_qt6 0
 %endif
 
-# disable due to gcc-14 bug
-%if 0%{?fedora} > 39
-%global use_qt6 0
-%global use_qt 0
-%endif
-
 # enable gtk3 by default
 %global gtk3 1
 
@@ -291,7 +285,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 121.0.6167.85
+Version: 121.0.6167.139
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1802,6 +1796,12 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %{chromium_path}/chromedriver
 
 %changelog
+* Wed Jan 31 2024 Than Ngo <than@redhat.com> - 121.0.6167.139-1
+- update to 121.0.6167.139
+  * High CVE-2024-1060: Use after free in Canvas
+  * High CVE-2024-1059: Use after free in WebRTC
+  * High CVE-2024-1077: Use after free in Network
+
 * Wed Jan 24 2024 Than Ngo <than@redhat.com> - 121.0.6167.85-1
 - update to 121.0.6167.85
   * High CVE-2024-0807: Use after free in WebAudio