diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index edd2307..3840a55 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -1,3 +1,29 @@
+-------------------------------------------------------------------
+Thu Oct 24 17:18:23 UTC 2013 - wr@rosenauer.org
+
+- update to Thunderbird 24.1.0 (bnc#847708)
+  * requires NSS 3.15.2 or above
+  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
+    Miscellaneous memory safety hazards
+  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
+    Spoofing addressbar through SELECT element
+  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
+    Access violation with XSLT and uninitialized data
+  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
+    Improperly initialized memory and overflows in some JavaScript
+    functions
+  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
+    Writing to cycle collected object during image decoding
+  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
+    Use-after-free when updating offline cache
+  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
+    (bmo#915210, bmo#915576, bmo#916685)
+    Miscellaneous use-after-free issues found through ASAN fuzzing
+  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
+    Memory corruption in workers
+  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
+    Use-after-free in HTML document templates
+
 -------------------------------------------------------------------
 Thu Oct 10 14:43:22 UTC 2013 - wr@rosenauer.org
 
diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec
index c5803d9..93f35ed 100644
--- a/MozillaThunderbird.spec
+++ b/MozillaThunderbird.spec
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 24.0.1
+%define mainversion 24.1.0
 %define update_channel release
 %define gstreamer_ver 0.10
 %define with_kde 1
@@ -34,7 +34,7 @@ BuildRequires:  libgnomeui-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  mozilla-nspr-devel >= 4.10
-BuildRequires:  mozilla-nss-devel >= 3.15.1
+BuildRequires:  mozilla-nss-devel >= 3.15.2
 BuildRequires:  nss-shared-helper-devel
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
@@ -50,7 +50,7 @@ BuildRequires:  pkgconfig(gstreamer-plugins-base-%gstreamer_ver)
 %endif
 Version:        %{mainversion}
 Release:        0
-%define releasedate 2013101000
+%define releasedate 2013102400
 Provides:       thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without the main package
diff --git a/_constraints b/_constraints
index 10b0e57..c510e01 100644
--- a/_constraints
+++ b/_constraints
@@ -5,7 +5,7 @@
       <size unit="G">9</size>
     </disk>
     <memory>
-      <size unit="M">3000</size>
+      <size unit="M">3500</size>
     </memory>
   </hardware>
 </constraints>
diff --git a/compare-locales.tar.bz2 b/compare-locales.tar.bz2
index e8415d6..497d82f 100644
--- a/compare-locales.tar.bz2
+++ b/compare-locales.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:02a2655e062dff2649d2a3742de577a5a1e7ab0d68481b3c92403ae500c72edc
-size 29906
+oid sha256:e6bbce3fd05986864a222ffd049afa9dd1b61254963a17327e6665e010207a88
+size 29912
diff --git a/create-tar.sh b/create-tar.sh
index d05215e..15c35f4 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -2,8 +2,8 @@
 
 CHANNEL="esr24"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_24_0_1_RELEASE"
-VERSION="24.0.1"
+RELEASE_TAG="THUNDERBIRD_24_1_0_RELEASE"
+VERSION="24.1.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird
diff --git a/l10n-24.0.1.tar.bz2 b/l10n-24.0.1.tar.bz2
deleted file mode 100644
index f1b7356..0000000
--- a/l10n-24.0.1.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:762a4c5d0233f816eeab2969f6f95294b13dfc9573fcd77df688dd7aaebc81aa
-size 27937701
diff --git a/l10n-24.1.0.tar.bz2 b/l10n-24.1.0.tar.bz2
new file mode 100644
index 0000000..2ead20a
--- /dev/null
+++ b/l10n-24.1.0.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9c53204340619e5f86f745e92c9197495f41673f2b8fc10c6dabc3b06d899530
+size 27959149
diff --git a/thunderbird-24.0.1-source.tar.bz2 b/thunderbird-24.0.1-source.tar.bz2
deleted file mode 100644
index 5d69ae3..0000000
--- a/thunderbird-24.0.1-source.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:439505840f9775c090927051616e77c61aaf8c0ae8145643c6e6114166dc5078
-size 142430472
diff --git a/thunderbird-24.1.0-source.tar.bz2 b/thunderbird-24.1.0-source.tar.bz2
new file mode 100644
index 0000000..c50519e
--- /dev/null
+++ b/thunderbird-24.1.0-source.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c5265dd997c69a654872cf91bc1ce2561cfe494be7dc471e18533ec0594f0134
+size 142424085