diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes
index 71e5499..fc32a1b 100644
--- a/MozillaFirefox.changes
+++ b/MozillaFirefox.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Thu Aug 27 06:03:51 UTC 2015 - wr@rosenauer.org
+
+- update to Firefox 40.0.3 (bnc#943550)
+  * Disable the asynchronous plugin initialization (bmo#1198590)
+  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
+  * Fix a regression with some Japanese fonts used in the <input>
+    field (bmo#1194055)
+  * On some sites, the selection in a select combox box using the
+    mouse could be broken (bmo#1194733)
+  security fixes
+  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
+    Use-after-free when resizing canvas element during restyling
+  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
+    Add-on notification bypass through data URLs
+
 -------------------------------------------------------------------
 Fri Aug  7 07:49:49 UTC 2015 - wr@rosenauer.org
 
diff --git a/MozillaFirefox.spec b/MozillaFirefox.spec
index 07de05b..90a8745 100644
--- a/MozillaFirefox.spec
+++ b/MozillaFirefox.spec
@@ -19,9 +19,9 @@
 
 # changed with every update
 %define major 40
-%define mainver %major.0
+%define mainver %major.0.3
 %define update_channel release
-%define releasedate 2015080700
+%define releasedate 2015082600
 
 # general build definitions
 %if "%{update_channel}" != "aurora"
diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz
index 1b436e8..276eb28 100644
--- a/compare-locales.tar.xz
+++ b/compare-locales.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:23d6c858a354e2572035208778ac8a4577e32326eebfa35833f9e0ffaec2fdb1
-size 28416
+oid sha256:4212c9293d8e7e44579b557f631ca452d85cb28df4ea9e87c4dda3eaebeb64e2
+size 28424
diff --git a/create-tar.sh b/create-tar.sh
index d914506..4539091 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -2,8 +2,8 @@
 
 CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_40_0_RELEASE"
-VERSION="40.0"
+RELEASE_TAG="FIREFOX_40_0_3_RELEASE"
+VERSION="40.0.3"
 
 # mozilla
 if [ -d mozilla ]; then
diff --git a/firefox-40.0-source.tar.xz b/firefox-40.0-source.tar.xz
deleted file mode 100644
index d0d0651..0000000
--- a/firefox-40.0-source.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:880094ee192cc1e0e456c9aa8fda0268f438fb9b9562a92d009e76cad0ef9e5d
-size 153271696
diff --git a/firefox-40.0.3-source.tar.xz b/firefox-40.0.3-source.tar.xz
new file mode 100644
index 0000000..ed17237
--- /dev/null
+++ b/firefox-40.0.3-source.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4be159f556c5c151e39fb4a8f9f346f453f57d8921d0eba03115798348496dc4
+size 152796164
diff --git a/l10n-40.0.3.tar.xz b/l10n-40.0.3.tar.xz
new file mode 100644
index 0000000..d60a3f5
--- /dev/null
+++ b/l10n-40.0.3.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dde30019e1f4cd7dc5c0071ceb656e7c82192cb09beff8dcd4f10fdd868dd30c
+size 42258496
diff --git a/l10n-40.0.tar.xz b/l10n-40.0.tar.xz
deleted file mode 100644
index 6245e9d..0000000
--- a/l10n-40.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c0be66fb31385822b0b2ef03f06a6aefb775630aca94e36e6f5c733e4a1d5f0d
-size 42267964
diff --git a/source-stamp.txt b/source-stamp.txt
index 1c7dd0a..4ec207d 100644
--- a/source-stamp.txt
+++ b/source-stamp.txt
@@ -1,2 +1,2 @@
-REV=84e0a4087157
+REV=5500ee2a6206
 REPO=http://hg.mozilla.org/releases/mozilla-release