diff --git a/.firefox.metadata b/.firefox.metadata
index 2c0b68e..9b8b886 100644
--- a/.firefox.metadata
+++ b/.firefox.metadata
@@ -1,6 +1,6 @@
 5012b69e54cbebe3b5e74011dacf3a2097f49921 SOURCES/cbindgen-vendor.tar.xz
-b39686eff2dfd96b58937b2bffa8528815b1b9df SOURCES/firefox-128.11.0esr.processed-source.tar.xz
-257f57ec9a9a8204b481ea702195981918307822 SOURCES/firefox-langpacks-128.11.0esr-20250521.tar.xz
+7bd722de95f3ecfd8652d3b55e0a8bb591a65d14 SOURCES/firefox-128.12.0esr.processed-source.tar.xz
+697f1f0e0d582f345d127bc503472bf60c2da5d6 SOURCES/firefox-langpacks-128.12.0esr-20250617.tar.xz
 2d8a6b2b30d5496735f49ffe8c8a7ede3a78a5ca SOURCES/mochitest-python.tar.gz
 d744f92e874688cc4b5376477dfdd639a97a6cd4 SOURCES/nspr-4.35.0-1.el8_1.src.rpm
 f466d7213e85773e002c48897524eaf909480046 SOURCES/nss-3.101.0-7.el8_2.src.rpm
diff --git a/.gitignore b/.gitignore
index 2d4f352..476fc52 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
 SOURCES/cbindgen-vendor.tar.xz
-SOURCES/firefox-128.11.0esr.processed-source.tar.xz
-SOURCES/firefox-langpacks-128.11.0esr-20250521.tar.xz
+SOURCES/firefox-128.12.0esr.processed-source.tar.xz
+SOURCES/firefox-langpacks-128.12.0esr-20250617.tar.xz
 SOURCES/mochitest-python.tar.gz
 SOURCES/nspr-4.35.0-1.el8_1.src.rpm
 SOURCES/nss-3.101.0-7.el8_2.src.rpm
diff --git a/SPECS/firefox.spec b/SPECS/firefox.spec
index 797d529..9a555c3 100644
--- a/SPECS/firefox.spec
+++ b/SPECS/firefox.spec
@@ -166,7 +166,7 @@ end}
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        128.11.0
+Version:        128.12.0
 Release:        1%{?dist}
 URL:            https://www.mozilla.org/firefox/
 License:        MPLv1.1 or GPLv2+ or LGPLv2+
@@ -197,7 +197,7 @@ ExcludeArch:    aarch64 s390 ppc
 # Link to original tarball: https://archive.mozilla.org/pub/firefox/releases/%%{version}%%{?pre_version}/source/firefox-%%{version}%%{?pre_version}.source.tar.xz
 Source0:        firefox-%{version}%{?pre_version}%{?buildnum}.processed-source.tar.xz
 %if %{with langpacks}
-Source1:        firefox-langpacks-%{version}%{?pre_version}-20250521.tar.xz
+Source1:        firefox-langpacks-%{version}%{?pre_version}-20250617.tar.xz
 %endif
 Source2:        cbindgen-vendor.tar.xz
 Source3:        process-official-tarball
@@ -1574,6 +1574,13 @@ MOZ_OPT_FLAGS="$MOZ_OPT_FLAGS -DNSS_PKCS11_3_0_STRICT"
 
 echo "export CFLAGS=\"$MOZ_OPT_FLAGS\"" >> .mozconfig
 echo "export CXXFLAGS=\"$MOZ_OPT_FLAGS\"" >> .mozconfig
+%ifarch aarch64
+echo "export ASFLAGS=\"-mbranch-protection=standard\"" >> .mozconfig
+%endif
+%ifarch x86_64
+echo "export ASFLAGS=\"-fcf-protection=full\"" >> .mozconfig
+%endif
+
 echo "export LDFLAGS=\"$MOZ_LINK_FLAGS\"" >> .mozconfig
 echo "export CC=gcc" >> .mozconfig
 echo "export CXX=g++" >> .mozconfig
@@ -1988,6 +1995,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 #---------------------------------------------------------------------
 
 %changelog
+* Tue Jun 17 2025 Eike Rathke <erack@redhat.com> - 128.12.0-1
+- Update to 128.12.0 build1
+
 * Wed May 21 2025 Eike Rathke <erack@redhat.com> - 128.11.0-1
 - Update to 128.11.0