diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 864215c..5171aab 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Wed Dec 23 10:13:38 UTC 2015 - wr@rosenauer.org
+
+- update to Thunderbird 38.5.0 (bnc#959277)
+  * MFSA 2015-134/CVE-2015-7201
+    Miscellaneous memory safety hazards
+  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
+    Use-after-free in WebRTC when datachannel is used after being
+    destroyed
+  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
+    Integer overflow allocating extremely large textures
+  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
+    Underflow through code inspection
+  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
+    Integer overflow in MP4 playback in 64-bit versions
+  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
+    Integer underflow and buffer overflow processing MP4 metadata in
+    libstagefright
+  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
+    Cross-site reading attack through data and view-source URIs
+
 -------------------------------------------------------------------
 Tue Nov 17 07:58:43 UTC 2015 - wr@rosenauer.org
 
diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec
index bf2b853..1d40645 100644
--- a/MozillaThunderbird.spec
+++ b/MozillaThunderbird.spec
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 38.4.0
+%define mainversion 38.5.0
 %define update_channel release
 
 %if %suse_version > 1210
@@ -69,7 +69,7 @@ Recommends:     gstreamer-0_10-plugins-ffmpeg
 %endif
 Version:        %{mainversion}
 Release:        0
-%define releasedate 2015092700
+%define releasedate 2015122200
 Provides:       thunderbird = %{version}
 Provides:       appdata()
 Provides:       appdata(thunderbird.appdata.xml)
diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz
index 99f9e6d..3a9eb0d 100644
--- a/compare-locales.tar.xz
+++ b/compare-locales.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:8c2a8cab284b765444c8a3e37b1b6ddbd9319c47f340aca208a6d504f64434b2
-size 28448
+oid sha256:79e24be3f9334840e630a2348fe98d65b84758e8dbae246a7be233ea6529d100
+size 28440
diff --git a/create-tar.sh b/create-tar.sh
index 58b03f0..272bb75 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -2,8 +2,8 @@
 
 CHANNEL="esr38"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_38_4_0_RELEASE"
-VERSION="38.4.0"
+RELEASE_TAG="THUNDERBIRD_38_5_0_RELEASE"
+VERSION="38.5.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird
diff --git a/l10n-38.4.0.tar.xz b/l10n-38.4.0.tar.xz
deleted file mode 100644
index 263d73f..0000000
--- a/l10n-38.4.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:30c3669a5635f3b2461ccbbf12f4cb8631a6f5c9df04018c1467a25f932bc10b
-size 22523632
diff --git a/l10n-38.5.0.tar.xz b/l10n-38.5.0.tar.xz
new file mode 100644
index 0000000..4250c80
--- /dev/null
+++ b/l10n-38.5.0.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:77c785069daa823c83b9d5fb41958026f5c05a178f24679d48923c418cab892d
+size 22522908
diff --git a/thunderbird-38.4.0-source.tar.xz b/thunderbird-38.4.0-source.tar.xz
deleted file mode 100644
index b66a21e..0000000
--- a/thunderbird-38.4.0-source.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:20dc5390c629d01295e9a5657344d6f5ebf3c221eef00f87907df9dce5a30f11
-size 174468864
diff --git a/thunderbird-38.5.0-source.tar.xz b/thunderbird-38.5.0-source.tar.xz
new file mode 100644
index 0000000..d5c0765
--- /dev/null
+++ b/thunderbird-38.5.0-source.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:36cb72b9ef1016155a198984ad931a9ff1cbf3af8c322e2b425f2fd1ee2781c9
+size 174464952