diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 3aa8631..38db769 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Wed Dec 11 15:48:02 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 128.5.2
+  * Large virtual folders could be very slow
+  * Message could disappear after moving from IMAP folder followed
+    by Undo and Redo
+  * XMPP chat did not display messages sent inside a CDATA element
+  * Selected calendar day did not move forward at midnight
+  * Today pane agenda sometimes scrolled for no apparent reason
+  * CalDAV calendars without offline support could degrade start-up
+    performance
+  * Visual and UX improvements
+  MFSA 2024-69
+  * CVE-2024-50336 (bmo#1929264)
+    matrix-js-sdk has insufficient MXC URI validation which could
+    allow client-side path traversal
+
 -------------------------------------------------------------------
 Tue Dec  3 07:41:29 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
 
diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec
index 3cdc2a6..a012743 100644
--- a/MozillaThunderbird.spec
+++ b/MozillaThunderbird.spec
@@ -29,8 +29,8 @@
 # major 69
 # mainver %%major.99
 %define major          128
-%define mainver        %major.5.1
-%define orig_version   128.5.1
+%define mainver        %major.5.2
+%define orig_version   128.5.2
 %define orig_suffix    esr
 %define update_channel esr
 %define source_prefix  thunderbird-%{orig_version}
diff --git a/l10n-128.5.1esr.tar.xz b/l10n-128.5.2esr.tar.xz
similarity index 100%
rename from l10n-128.5.1esr.tar.xz
rename to l10n-128.5.2esr.tar.xz
diff --git a/tar_stamps b/tar_stamps
index 9d37df8..8134a9f 100644
--- a/tar_stamps
+++ b/tar_stamps
@@ -1,10 +1,10 @@
 PRODUCT="thunderbird"
 CHANNEL="esr128"
-VERSION="128.5.1"
+VERSION="128.5.2"
 VERSION_SUFFIX="esr"
-REV_VERSION="128.5.0"
+REV_VERSION="128.5.1"
 PREV_VERSION_SUFFIX="esr"
 #SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
 RELEASE_REPO="https://hg.mozilla.org/releases/comm-esr128"
-RELEASE_TAG="83b78f924766fceda5ec1d187e10677b5b2e2e73"
-RELEASE_TIMESTAMP="20241202160748"
+RELEASE_TAG="2e403316e9cb803e5ad9bd34eab5bf812fd32186"
+RELEASE_TIMESTAMP="20241210220830"
diff --git a/thunderbird-128.5.1esr.source.tar.xz b/thunderbird-128.5.1esr.source.tar.xz
deleted file mode 100644
index cc57f68..0000000
--- a/thunderbird-128.5.1esr.source.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:035fb708f98cf4c90a193a1b3c8a381613ae4001af8c5a62a876d469c097bb5b
-size 678670780
diff --git a/thunderbird-128.5.1esr.source.tar.xz.asc b/thunderbird-128.5.1esr.source.tar.xz.asc
deleted file mode 100644
index c610bb5..0000000
--- a/thunderbird-128.5.1esr.source.tar.xz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEErdcHlHlwDcrf3VM34207E/PZMnQFAmdOCLkACgkQ4207E/PZ
-MnT21xAAjC9a3QrufXUe43PondZ7rD/HZqHy701dHwQFycsfb63SpYZbYbl+6RKd
-0mlfnwShNEL/tBVl6Y7ls/Y8bCfRenwJiGbHOQ1ZYeVIaIHHgUhts0gusLf/sWvF
-2OE5PsKULNTfg88stZK681ff0+eHCy7F3dB0hkGn/G1jb7haYoZDd3CZ8P3rBYP9
-nJ6IJyAwf3vmH0eym/2QnJLqU9tGgyM5hcYDD5WQzrH3GPM9ZzxkI0ZSECjlF2Sw
-V5OnHI0Qd2ONcuF6e1PD93h2g8L8nke7WdnGeTj4yUBXUyWPqRaGyU/nDgvL+A7n
-rrbaMdzMA98DdX7o3FzL8CyvSByEmNF/iKCEkR3Y9+i4KmbYvoi5F+ehjUuus6xq
-+LY1egWJZ0gULRuPIKRp6fY9yAQ9aFig76oKxRrNfyrrZwa8CB3LP156PP5g50ey
-zGGyYwZzszGD0iPKzVOOsFMtuy3R3W7W+Zw27xnKcKQkU2uLcRCZOFbcaeHD9Php
-6tFIWR6QkDM5ghjM43vx+xAwyp8jKVDlJs/FpcP5Dn75aQPRj8URq0BVmB2QrTuY
-1yyRSCs9J6yk7i7nlORIQ0weBybw3ZE5nix2lpuAFqOxeajrL2EwmSwZ4+20Dkch
-s3Bqd4CqgVRcDtE77G4u+UtqZdbX2CVx0OFmnQdBxjdO4VJZGAQ=
-=8TqA
------END PGP SIGNATURE-----
diff --git a/thunderbird-128.5.2esr.source.tar.xz b/thunderbird-128.5.2esr.source.tar.xz
new file mode 100644
index 0000000..956d25a
--- /dev/null
+++ b/thunderbird-128.5.2esr.source.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ef932fe30fcc3f90f465feffcf641147d678ec3ecda220f317046e715a905547
+size 674696420
diff --git a/thunderbird-128.5.2esr.source.tar.xz.asc b/thunderbird-128.5.2esr.source.tar.xz.asc
new file mode 100644
index 0000000..44134f1
--- /dev/null
+++ b/thunderbird-128.5.2esr.source.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=HaSZ
+-----END PGP SIGNATURE-----