diff --git a/firefox-140.4.0esr.source.tar.xz b/firefox-140.5.0esr.source.tar.xz
similarity index 32%
rename from firefox-140.4.0esr.source.tar.xz
rename to firefox-140.5.0esr.source.tar.xz
index c12231bce1afe2ffccb6fb555adcb47e405e5a4c..1d4ebc3648e9d4d4f9d6773941fc1e038583564a 100644
--- a/firefox-140.4.0esr.source.tar.xz
+++ b/firefox-140.5.0esr.source.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:49f20673171046bc7b64f4caa340c46e1e105b9107f0ef68b7a94f379bcea4f7
-size 639276460
+oid sha256:832b7ef3e5f7a2430e0ba0b9000dab6fdd8f65bccff8bcf7eeb9ed16e6d310e2
+size 636823136
diff --git a/firefox-langpacks-140.4.0esr.tar.xz b/firefox-langpacks-140.5.0esr.tar.xz
similarity index 32%
rename from firefox-langpacks-140.4.0esr.tar.xz
rename to firefox-langpacks-140.5.0esr.tar.xz
index 490fe7932f4ebc68b056fbb060140ca154a67486..f97a71bdf41f23ac9d43d1ffa122c1daa6ff3a7b 100644
--- a/firefox-langpacks-140.4.0esr.tar.xz
+++ b/firefox-langpacks-140.5.0esr.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:50bd29d5cc5d58864ce1ed51b4821a71a06a4ee9e57c075b4375476a70e61f8c
-size 33475680
+oid sha256:60652603a33360e7efe26c0e8798d2d44d599d0361e4870699c8d33f5d41cec1
+size 33425648
diff --git a/firefox.spec b/firefox.spec
index 2ed1b3f95e742c2058e3eabf1f8feea68305eae5..c1463f019cef79e7567af4f856235f81fefa2622 100644
--- a/firefox.spec
+++ b/firefox.spec
@@ -34,8 +34,7 @@
 %global system_webp       1
 
 %if %{?system_nss}
-%global nspr_version      4.35
-%global nspr_version_max  4.36
+%global nspr_version      4.32
 %global nss_version       3.112
 %endif
 
@@ -52,8 +51,8 @@
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        140.4.0
-Release:        3
+Version:        140.5.0
+Release:        1
 URL:            https://www.mozilla.org/firefox/
 License:        MPL-1.1 or GPL-2.0-or-later or LGPL-2.0-or-later
 Source0:        https://ftp.mozilla.org/pub/firefox/releases/%{version}esr/source/firefox-%{version}esr.source.tar.xz
@@ -136,7 +135,6 @@ Patch801:       bmo-1559213-fix-system-av1-libs.patch
 # BUILD REQURES/REQUIRES
 %if %{?system_nss}
 BuildRequires:  pkgconfig(nspr) >= %{nspr_version}
-BuildRequires:  pkgconfig(nspr) < %{nspr_version_max}
 BuildRequires:  pkgconfig(nss) >= %{nss_version}
 BuildRequires:  nss-static >= %{nss_version}
 %endif
@@ -953,21 +951,6 @@ if [ $1 -eq 0 ]; then
   %{__rm} -rf %{mozappdir}/plugins
 fi
 
-%post
-update-desktop-database &> /dev/null || :
-touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
-
-%postun
-update-desktop-database &> /dev/null || :
-if [ $1 -eq 0 ] ; then
-    touch --no-create %{_datadir}/icons/hicolor &>/dev/null
-    gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
-    %{__rm} -rf %{langpackdir}
-fi
-
-%posttrans
-gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
-
 %files -f %{name}.lang
 %{_bindir}/firefox
 %{mozappdir}/firefox
@@ -1020,6 +1003,12 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 %endif
 
 %changelog
+* Tue Nov 11 2025 Funda Wang <fundawang@yeah.net> - 140.5.0-1
+- update to 140.5.0
+  * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
+    CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
+    CVE-2025-13020
+
 * Wed Oct 22 2025 Funda Wang <fundawang@yeah.net> - 140.4.0-3
 - support building with system cbindgen
 - build with system ldflags