--- a/MozillaFirefox/MozillaFirefox.changes	Sat Dec 19 17:31:28 2015 +0100
+++ b/MozillaFirefox/MozillaFirefox.changes	Sat Dec 26 13:34:28 2015 +0100
@@ -1,4 +1,17 @@
 -------------------------------------------------------------------
+Sat Dec 26 07:37:19 UTC 2015 - wr@rosenauer.org
+
+- update to Firefox 43.0.3
+  * requires NSS 3.20.2 to fix
+    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
+    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
+    server signature
+  * various changes to support Windows update (SHA-1 vs. SHA-2)
+  * workaround Youtube user agent detection issue (bmo#1233970)
+- fix file download regression for multi user systems
+  (bmo#1233434) (mozilla-bmo1233434.patch)
+
+-------------------------------------------------------------------
 Sun Dec 13 23:07:56 UTC 2015 - wr@rosenauer.org
 
 - update to Firefox 43.0 (bnc#959277)

--- a/MozillaFirefox/MozillaFirefox.spec	Sat Dec 19 17:31:28 2015 +0100
+++ b/MozillaFirefox/MozillaFirefox.spec	Sat Dec 26 13:34:28 2015 +0100
@@ -19,9 +19,9 @@
 
 # changed with every update
 %define major 43
-%define mainver %major.0
+%define mainver %major.0.3
 %define update_channel release
-%define releasedate 2015121300
+%define releasedate 2015122500
 
 # general build definitions
 %if "%{update_channel}" != "aurora"
@@ -77,7 +77,7 @@
 BuildRequires:  libproxy-devel
 BuildRequires:  makeinfo
 BuildRequires:  mozilla-nspr-devel >= 4.10.10
-BuildRequires:  mozilla-nss-devel >= 3.19.4
+BuildRequires:  mozilla-nss-devel >= 3.20.2
 BuildRequires:  nss-shared-helper-devel
 BuildRequires:  python-devel
 BuildRequires:  startup-notification-devel
@@ -90,6 +90,17 @@
 BuildRequires:  pkgconfig(gstreamer-app-%gstreamer_ver)
 BuildRequires:  pkgconfig(gstreamer-plugins-base-%gstreamer_ver)
 BuildRequires:  pkgconfig(libpulse)
+# libavcodec is already used if available for H.264 but
+# explicitely loaded by FF. For proper H.264 support the
+# openSUSE delivered version is not sufficient but currently
+# prevents even the use of the GStreamer method
+# https://bugzilla.mozilla.org/show_bug.cgi?id=1234157
+# to get H.264 working correctly libavcodec from packman
+# is required. As of today the following recommends will
+# pull in libavcodec52 from packman since it's the only
+# package providing libavcodec but it's not loaded from
+# Firefox as the minimal version is 53
+#Recommends:     libavcodec
 %if 0%{?gstreamer} == 1
 Requires:       libgstreamer-1_0-0
 Recommends:     gstreamer-fluendo-mp3
@@ -147,6 +158,7 @@
 Patch8:         mozilla-openaes-decl.patch
 Patch10:        mozilla-no-stdcxx-check.patch
 Patch11:        mozilla-libproxy.patch
+Patch12:        mozilla-bmo1233434.patch
 # Firefox/browser
 Patch101:       firefox-kde.patch
 Patch102:       firefox-no-default-ualocale.patch
@@ -256,6 +268,7 @@
 %patch8 -p1
 %patch10 -p1
 %patch11 -p1
+%patch12 -p1
 # Firefox
 %patch101 -p1
 %patch102 -p1

--- a/MozillaFirefox/create-tar.sh	Sat Dec 19 17:31:28 2015 +0100
+++ b/MozillaFirefox/create-tar.sh	Sat Dec 26 13:34:28 2015 +0100
@@ -2,8 +2,8 @@
 
 CHANNEL="release"
 BRANCH="releases/mozilla-$CHANNEL"
-RELEASE_TAG="FIREFOX_43_0_RELEASE"
-VERSION="43.0"
+RELEASE_TAG="FIREFOX_43_0_3_RELEASE"
+VERSION="43.0.3"
 
 # mozilla
 if [ -d mozilla ]; then

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/MozillaFirefox/mozilla-bmo1233434.patch	Sat Dec 26 13:34:28 2015 +0100
@@ -0,0 +1,1 @@
+../mozilla-bmo1233434.patch
\ No newline at end of file

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mozilla-bmo1233434.patch	Sat Dec 26 13:34:28 2015 +0100
@@ -0,0 +1,45 @@
+
+# HG changeset patch
+# User Aidin Gharibnavaz <aidin@aidinhut.com>
+# Date 1450550460 -12600
+# Node ID 07ec362866977f37e638fc88e3079621fd7aef96
+# Parent  cb66ffeb6725e8344818e8e2f707ae2eaeb953b4
+Bug 1233434 - Fixing download failure on a multi-user GNU/Linux machine. r?bagder
+
+diff -r cb66ffeb6725 -r 07ec36286697 uriloader/exthandler/nsExternalHelperAppService.cpp
+--- a/uriloader/exthandler/nsExternalHelperAppService.cpp	Tue Dec 15 14:45:06 2015 +0100
++++ b/uriloader/exthandler/nsExternalHelperAppService.cpp	Sat Dec 19 22:11:00 2015 +0330
+@@ -416,12 +416,12 @@
+     const char* userName = PR_GetEnv("USERNAME");
+     if (!userName || !*userName) {
+       userName = PR_GetEnv("USER");
+-      if (!userName || !*userName) {
+-        userName = PR_GetEnv("LOGNAME");
+-      }
+-      else {
+-        userName = "mozillaUser";
+-      }
++    }
++    if (!userName || !*userName) {
++      userName = PR_GetEnv("LOGNAME");
++    }
++    if (!userName || !*userName) {
++      userName = "mozillaUser";
+     }
+ 
+     nsAutoString userDir;
+@@ -447,7 +447,12 @@
+         rv = finalPath->GetPermissions(&permissions);
+         NS_ENSURE_SUCCESS(rv, rv);
+ 
+-        if (permissions == PR_IRWXU) {
++        // Ensuring the path is writable by the current user.
++        bool isWritable;
++        rv = finalPath->IsWritable(&isWritable);
++        NS_ENSURE_SUCCESS(rv, rv);
++
++        if (permissions == PR_IRWXU && isWritable) {
+           dir = finalPath;
+           break;
+         }
+

--- a/series	Sat Dec 19 17:31:28 2015 +0100
+++ b/series	Sat Dec 26 13:34:28 2015 +0100
@@ -12,6 +12,7 @@
 #mozilla-bmo1005535.patch
 mozilla-no-stdcxx-check.patch
 mozilla-libproxy.patch
+mozilla-bmo1233434.patch
 
 # Firefox patches
 firefox-kde.patch