diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 5171aab..e4a8a13 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Tue Dec 29 20:30:59 UTC 2015 - wr@rosenauer.org
+
+- update to Thunderbird 38.5.1
+  * requires NSS 3.20.2 to fix
+    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
+    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
+    server signature
+- explicitely require libXcomposite-devel
+
 -------------------------------------------------------------------
 Wed Dec 23 10:13:38 UTC 2015 - wr@rosenauer.org
 
diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec
index 1d40645..d393b96 100644
--- a/MozillaThunderbird.spec
+++ b/MozillaThunderbird.spec
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.5.0
+%define mainversion 38.5.1
 %define update_channel release
 
 %if %suse_version > 1210
@@ -38,12 +38,13 @@ BuildRequires:  dbus-1-glib-devel
 BuildRequires:  fdupes
 BuildRequires:  gcc-c++
 BuildRequires:  hunspell-devel
+BuildRequires:  libXcomposite-devel
 BuildRequires:  libcurl-devel
 BuildRequires:  libgnomeui-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  mozilla-nspr-devel >= 4.10.10
-BuildRequires:  mozilla-nss-devel >= 3.19.2.1
+BuildRequires:  mozilla-nss-devel >= 3.20.2
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
 BuildRequires:  unzip
diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz
index 3a9eb0d..38e8a96 100644
--- a/compare-locales.tar.xz
+++ b/compare-locales.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:79e24be3f9334840e630a2348fe98d65b84758e8dbae246a7be233ea6529d100
-size 28440
+oid sha256:d90817b552f9eba62f1d009b62feeb227d4d736264832ff272348b28fdeeeefc
+size 28412
diff --git a/create-tar.sh b/create-tar.sh
index 272bb75..469b8f0 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_5_0_RELEASE"
-VERSION="38.5.0"
+RELEASE_TAG="THUNDERBIRD_38_5_1_RELEASE"
+VERSION="38.5.1"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird
diff --git a/l10n-38.5.0.tar.xz b/l10n-38.5.0.tar.xz
deleted file mode 100644
index 4250c80..0000000
--- a/l10n-38.5.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:77c785069daa823c83b9d5fb41958026f5c05a178f24679d48923c418cab892d
-size 22522908
diff --git a/l10n-38.5.1.tar.xz b/l10n-38.5.1.tar.xz
new file mode 100644
index 0000000..25f9c2e
--- /dev/null
+++ b/l10n-38.5.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:04d6f98a0a9a437bdf48c5031a33789bc90774f837f035644fce9aaac7c5a990
+size 22524664
diff --git a/thunderbird-38.5.0-source.tar.xz b/thunderbird-38.5.0-source.tar.xz
deleted file mode 100644
index d5c0765..0000000
--- a/thunderbird-38.5.0-source.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:36cb72b9ef1016155a198984ad931a9ff1cbf3af8c322e2b425f2fd1ee2781c9
-size 174464952
diff --git a/thunderbird-38.5.1-source.tar.xz b/thunderbird-38.5.1-source.tar.xz
new file mode 100644
index 0000000..2168e28
--- /dev/null
+++ b/thunderbird-38.5.1-source.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0e0a2079b2d8d42c5da47ab7926251c7020078c81ffc45ff1a8ecd65a626ea57
+size 174513596