diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index b54bc2b00e..9be43938cc 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -41,6 +41,10 @@
     <listitem>
       <para>September 26th, 2023</para>
       <itemizedlist>
+        <listitem>
+          <para>[ken] - Update to firefox-115.3.0, Security Update. Fixes
+          <ulink url="&blfs-ticket-root;18635">#18635</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[renodr] - Add simple-scan to the book. This will eventually
           replace XSane. Fixes
diff --git a/packages.ent b/packages.ent
index 8a3891b36a..e0102b019d 100644
--- a/packages.ent
+++ b/packages.ent
@@ -990,7 +990,7 @@ to avoid building libxml2 twice, which is slow with all deps -->
 <!-- Chapter 40 -->
 <!ENTITY epiphany-version             "44.6">
 <!-- falkon version is the same as KDE applications -->
-<!ENTITY firefox-version              "115.2.1">
+<!ENTITY firefox-version              "115.3.0">
 <!ENTITY seamonkey-version            "2.53.17">
 
 <!-- Chapter 41 -->
diff --git a/xsoft/graphweb/firefox.xml b/xsoft/graphweb/firefox.xml
index a846508e30..e9bb1d7bad 100644
--- a/xsoft/graphweb/firefox.xml
+++ b/xsoft/graphweb/firefox.xml
@@ -6,16 +6,16 @@
 
   <!ENTITY firefox-download-http "&mozilla-http;/firefox/releases/&firefox-version;esr/source/firefox-&firefox-version;esr.source.tar.xz">
   <!ENTITY firefox-download-ftp  " ">
-  <!ENTITY firefox-md5sum        "c8deec3a0e558a1882f11bbea2fbd462">
-  <!ENTITY firefox-size          "484 MB">
+  <!ENTITY firefox-md5sum        "3d5cd8d91491dea9a6aae8e6c1ea1a8d">
+  <!ENTITY firefox-size          "487 MB">
 
   <!-- NB with stylo, much of the build uses rust, and therefore cargo files.
     But the extra cached cargo files, if any, seem to be minimal -->
-  <!ENTITY firefox-buildsize     "6.4 GB (209 MB installed) without tests">
+  <!ENTITY firefox-buildsize     "6.3 GB (209 MB installed) without tests">
   <!-- editors: with ff63 and rust-1.29, ./mach build -j4 is probably the
    most practical way to get a timing on a machine with more cores, if taking
    cores offline is not practical. If in doubt, round up -->
-  <!ENTITY firefox-time          "22 SBU using -j4, without tests">
+  <!ENTITY firefox-time          "12.5 SBU using -j8, without tests">
 ]>
 
 <sect1 id="firefox" xreflabel="Firefox-&firefox-version;">