diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 88831c3..55895cc 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Sun Dec  8 10:18:03 UTC 2013 - wr@rosenauer.org
+
+- update to Thunderbird 24.2.0 (bnc#854370)
+  * requires NSS 3.15.3.1 or higher
+  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
+    Miscellaneous memory safety hazards
+  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
+    Use-after-free in event listeners
+  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
+    Use-after-free during Table Editing
+  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
+    Segmentation violation when replacing ordered list elements
+  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
+    Trust settings for built-in roots ignored during EV certificate
+    validation
+  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
+    Use-after-free in synthetic mouse movement
+  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
+    GetElementIC typed array stubs can be generated outside observed
+    typesets
+  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
+    JPEG information leak
+  * MFSA 2013-117 (bmo#946351)
+    Mis-issued ANSSI/DCSSI certificate
+    (fixed via NSS 3.15.3.1)
+
 -------------------------------------------------------------------
 Tue Nov 19 08:08:00 UTC 2013 - wr@rosenauer.org
 
diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec
index 330eb97..74d23e5 100644
--- a/MozillaThunderbird.spec
+++ b/MozillaThunderbird.spec
@@ -17,7 +17,7 @@
 #
 
 
-%define mainversion 24.1.1
+%define mainversion 24.2.0
 %define update_channel release
 %define gstreamer_ver 0.10
 %define with_kde 1
@@ -34,7 +34,7 @@ BuildRequires:  libgnomeui-devel
 BuildRequires:  libidl-devel
 BuildRequires:  libnotify-devel
 BuildRequires:  mozilla-nspr-devel >= 4.10.2
-BuildRequires:  mozilla-nss-devel >= 3.15.3
+BuildRequires:  mozilla-nss-devel >= 3.15.3.1
 BuildRequires:  nss-shared-helper-devel
 BuildRequires:  python
 BuildRequires:  startup-notification-devel
@@ -50,7 +50,7 @@ BuildRequires:  pkgconfig(gstreamer-plugins-base-%gstreamer_ver)
 %endif
 Version:        %{mainversion}
 Release:        0
-%define releasedate 2013111800
+%define releasedate 2013120700
 Provides:       thunderbird = %{version}
 %if %{with_kde}
 # this is needed to match this package with the kde4 helper package without the main package
diff --git a/compare-locales.tar.bz2 b/compare-locales.tar.bz2
index 239b284..8b1f4af 100644
--- a/compare-locales.tar.bz2
+++ b/compare-locales.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:0ae14dffae85fffa2325fd259cb27006124957432308865c09988a1b495c91b9
-size 29874
+oid sha256:8f7c714b55bfdf4e39c93acd74e18f91e12a9fa639a90e0992ea4c3f19cf79e6
+size 29887
diff --git a/create-tar.sh b/create-tar.sh
index a584699..a88cf82 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -2,8 +2,8 @@
 
 CHANNEL="esr24"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="THUNDERBIRD_24_1_1_RELEASE"
-VERSION="24.1.1"
+RELEASE_TAG="THUNDERBIRD_24_2_0_RELEASE"
+VERSION="24.2.0"
 
 echo "cloning $BRANCH..."
 hg clone http://hg.mozilla.org/$BRANCH thunderbird
diff --git a/l10n-24.1.1.tar.bz2 b/l10n-24.1.1.tar.bz2
deleted file mode 100644
index 7dbf8c9..0000000
--- a/l10n-24.1.1.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:58548b860fa110a2ab22f4126cd4b086cf0c011dfe60b80e7acec9a2d88b6b8e
-size 27965056
diff --git a/l10n-24.2.0.tar.bz2 b/l10n-24.2.0.tar.bz2
new file mode 100644
index 0000000..528dd7e
--- /dev/null
+++ b/l10n-24.2.0.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c233fcaf0f3ab142699efaf987c162baeb6871dc5e63ef2f7cbc82159b754417
+size 27985537
diff --git a/thunderbird-24.1.1-source.tar.bz2 b/thunderbird-24.1.1-source.tar.bz2
deleted file mode 100644
index f7bf5b1..0000000
--- a/thunderbird-24.1.1-source.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2a22a776153522fc92ca8e0ddf5fbfc5cd660b284866a248b5e0caf4d724d43e
-size 142417457
diff --git a/thunderbird-24.2.0-source.tar.bz2 b/thunderbird-24.2.0-source.tar.bz2
new file mode 100644
index 0000000..78c40c0
--- /dev/null
+++ b/thunderbird-24.2.0-source.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6a76caee6a9400d2d0f35ad07d8f7687425b7048398b6e61362b764fb81c1593
+size 142466564