diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes
index ddc63e0..9163548 100644
--- a/MozillaFirefox.changes
+++ b/MozillaFirefox.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Fri Aug  7 07:09:39 UTC 2015 - wr@rosenauer.org
+
+- security update to Firefox 39.0.3 (bnc#940918)
+  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
+    Same origin violation and local file stealing via PDF reader
+
 -------------------------------------------------------------------
 Wed Jul  1 06:43:02 UTC 2015 - wr@rosenauer.org
 
diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec
index f7d38a5..ec2bff2 100644
--- a/MozillaFirefox.spec
+++ b/MozillaFirefox.spec
@@ -19,9 +19,9 @@
 
 # changed with every update
 %define major 39
-%define mainver %major.0
+%define mainver %major.0.3
 %define update_channel release
-%define releasedate 2015063000
+%define releasedate 2015080600
 
 # general build definitions
 %if "%{update_channel}" != "aurora"
diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz
index c37b499..7de0057 100644
--- a/compare-locales.tar.xz
+++ b/compare-locales.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:7d81026bcb6180f233d685249992000512792b599de71e85b15f2a4319706b7e
-size 28448
+oid sha256:6eada9b700cdd5780fa86b19a687aa8329b073ea0468338c884fa2431e787b62
+size 28400
diff --git a/create-tar.sh b/create-tar.sh
index 4e06f15..53371fb 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -2,8 +2,8 @@
 
 CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_39_0_RELEASE"
-VERSION="39.0"
+RELEASE_TAG="FIREFOX_39_0_3_RELEASE"
+VERSION="39.0.3"
 
 # mozilla
 if [ -d mozilla ]; then
diff --git a/firefox-39.0-source.tar.xz b/firefox-39.0-source.tar.xz
deleted file mode 100644
index 7863f79..0000000
--- a/firefox-39.0-source.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b0c4457706a43832e166902a53cb61531fc446a5039c41d051e4b989817da101
-size 156760208
diff --git a/firefox-39.0.3-source.tar.xz b/firefox-39.0.3-source.tar.xz
new file mode 100644
index 0000000..f0da077
--- /dev/null
+++ b/firefox-39.0.3-source.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4115f51076f7e109a3b7958e735da2e741c26bcec862f1a92e8fd7404d841b64
+size 157090912
diff --git a/l10n-39.0.3.tar.xz b/l10n-39.0.3.tar.xz
new file mode 100644
index 0000000..0d1f037
--- /dev/null
+++ b/l10n-39.0.3.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8a55b0cff127dd0603a3cc35bc8ed5b863522521c88a94a5e044e065bdb980c3
+size 42240040
diff --git a/l10n-39.0.tar.xz b/l10n-39.0.tar.xz
deleted file mode 100644
index 996e305..0000000
--- a/l10n-39.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:00ffedb90fe76f706bef76208716a5350c3f10e4c8aa5a1608e5f43fb361c69b
-size 42221112
diff --git a/source-stamp.txt b/source-stamp.txt
index 20bdb48..b624087 100644
--- a/source-stamp.txt
+++ b/source-stamp.txt
@@ -1,2 +1,2 @@
-REV=d3b3e57e8088
+REV=5a41909266e5
 REPO=http://hg.mozilla.org/releases/mozilla-release