diff --git a/.chromium.metadata b/.chromium.metadata
index a02e3baf..1f09f8d0 100644
--- a/.chromium.metadata
+++ b/.chromium.metadata
@@ -1,4 +1,4 @@
-3dd7b4225d77f919dbfa1a002a5f2f152357c545  SOURCES/chromium-129.0.6668.58.tar.xz
+063fb3c6934be16edcc2faa0745ebe6130c6df84  SOURCES/chromium-129.0.6668.70.tar.xz
 ccd15016324e640c40f6fc01ab076dc52196ea54  SOURCES/msspi-e91bd46306cc7044b2903cd07b788c13c36481e3.tar.xz
 3b3602227af2be24789daeedf42ae02c2f6e29e9  SOURCES/Chromium-Gost-124a371049d7a087a24f25ee4c5ed51c897a157b.tar.xz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz
diff --git a/.gitignore b/.gitignore
index 545225f4..f04e2bf9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,4 @@
-SOURCES/chromium-129.0.6668.58.tar.xz
+SOURCES/chromium-129.0.6668.70.tar.xz
 SOURCES/linux-x64-0.19.2.tgz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/node-v20.6.1-linux-x64.tar.xz
diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec
index 97e8e2b4..45bda280 100644
--- a/SPECS/chromium.spec
+++ b/SPECS/chromium.spec
@@ -313,7 +313,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 129.0.6668.58
+Version: 129.0.6668.70
 Release: 1%{?dist}.inferit
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -2103,6 +2103,13 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %endif
 
 %changelog
+* Wed Sep 25 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 129.0.6668.70-1.inferit
+- update to 129.0.6668.70
+  * High CVE-2024-9120: Use after free in Dawn
+  * High CVE-2024-9121: Inappropriate implementation in V8
+  * High CVE-2024-9122: Type Confusion in V8
+  * High CVE-2024-9123: Integer overflow in Skia
+
 * Thu Sep 19 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 129.0.6668.58-1.inferit
 - update to 129.0.6668.58
   * High CVE-2024-8904: Type Confusion in V8