diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 99330c3..ef4590e 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Thu Jun 20 22:15:46 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- Mozilla Thunderbird 60.7.2
+  MFSA 2019-20 (boo#1138872)
+  * CVE-2019-11707 (bmo#1544386)
+    Type confusion in Array.pop
+  * CVE-2019-11708 (bmo#1559858)
+    sandbox escape using Prompt:Open
+
 -------------------------------------------------------------------
 Wed Jun 12 06:23:28 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
 
diff --git a/MozillaThunderbird.spec b/MozillaThunderbird.spec
index 27e5fab..72a2035 100644
--- a/MozillaThunderbird.spec
+++ b/MozillaThunderbird.spec
@@ -17,9 +17,9 @@
 #
 
 
-%define mainversion 60.7.1
+%define mainversion 60.7.2
 %define update_channel release
-%define releasedate 20190611205646
+%define releasedate 20190620083217
 
 %bcond_without mozilla_tb_kde4
 %bcond_with    mozilla_tb_valgrind
diff --git a/compare-locales.tar.xz b/compare-locales.tar.xz
index 9f876ea..57b8190 100644
--- a/compare-locales.tar.xz
+++ b/compare-locales.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:fd1f008f57c10fce0090a283f129fe2ddf828276da54b6b3fb151e93c4106bcb
-size 28360
+oid sha256:84d4e910076684f1791d3575a9ce5356673e58ec5c1e7cef9f69db77801d3ee8
+size 28368
diff --git a/create-tar.sh b/create-tar.sh
index 89e4cad..b932465 100644
--- a/create-tar.sh
+++ b/create-tar.sh
@@ -2,9 +2,9 @@
 
 CHANNEL="esr60"
 BRANCH="releases/comm-$CHANNEL"
-RELEASE_TAG="a9f99cffa752340d368ddf90ba813c44c82eafce"
-MOZ_RELEASE_TAG="2ae9b50be57173c299c10df512590e2feb164977"
-VERSION="60.7.1"
+RELEASE_TAG="e8ba58f175184985890f5c5aa0b8ff6bd4275b82"
+MOZ_RELEASE_TAG="2fbdde45ed69194ed3908fc665e1d759c3d8f7c9"
+VERSION="60.7.2"
 VERSION_SUFFIX=""
 LOCALE_FILE="thunderbird-$VERSION/comm/mail/locales/l10n-changesets.json"
 
diff --git a/l10n-60.7.1.tar.xz b/l10n-60.7.1.tar.xz
deleted file mode 100644
index 47f7f2f..0000000
--- a/l10n-60.7.1.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:41474b0be56ff86da77f11f37cfd30579b61309fbf8ed6f136550a5a4f4f22f7
-size 27447064
diff --git a/l10n-60.7.2.tar.xz b/l10n-60.7.2.tar.xz
new file mode 100644
index 0000000..7ff6fda
--- /dev/null
+++ b/l10n-60.7.2.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ae813ba30c6e7198fffd213a9c1a69aaefcdd703299aa7fb84c7540004a11a5f
+size 27432848
diff --git a/thunderbird-60.7.1.source.tar.xz b/thunderbird-60.7.1.source.tar.xz
deleted file mode 100644
index a98f45a..0000000
--- a/thunderbird-60.7.1.source.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f638cb12415af3a34134fa6c60ba082752c949461ca92e529205a05ac6486453
-size 284760060
diff --git a/thunderbird-60.7.1.source.tar.xz.asc b/thunderbird-60.7.1.source.tar.xz.asc
deleted file mode 100644
index 70d6f00..0000000
--- a/thunderbird-60.7.1.source.tar.xz.asc
+++ /dev/null
@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.14 (GNU/Linux)
-
-iQIcBAABCAAGBQJdAC0FAAoJELu+vbskxvNVWf0QAJ46bUwVa6YoFnyo97fW3xgC
-mJ6Lgom8nPrz6lqIZJkEuD92dCY46yDN6sUq9AdN/LXibQf5UXwIhxAmb/dnQOdr
-KPgaEW2Cz33+DCCMk1fwbNL+gAUpSWEPssaIqXqvw9tQkauz55DSxhB4GQzaA0g+
-D0AQpFc6VNSbJnaNrfeJuIlFbbeQVp+/vYOKN2fVscjL8CBQ8fPE/3AYgyMCbhSO
-EukNL9fKPaLqUY0MlQy8GufJJhI1QgXatkVphv85OtOZHHnTUPi+88pbZ++11TUY
-Lelgz5pvGMe0mi8ITZq22U5AVSLOGg9ehsJZtwUzQ0vgxIdhyoRAiCA7SCHjRpXE
-Iyny7YB/H+tyou8Vh7+zi6AmoY1CsH2lfXx4eN78Zn6fnqCkHsJNaIHKMe7IlNTK
-kWyPsuM9AG1tqPUx7reHl8Spf/JX3bvhGeN+8oUlndvBxRSIY9L3PMowmStih+PQ
-eUqcaNxruboB2aCPbDjyatt2bWjDG/156dEYfzVmDeGNRJWr8UqEionQTHdLXuEg
-74EqkZl8i2IdyfOzX2k65tq+Qshu4AmBkq65lWcl/zF1QFO80xFdXNJSOC0OV3Yk
-BB8nOCQ2IW+dVMRgPYQ5AWgZIS2fhcTjNGmxqHhfirbgBKhxPFlSv+baTkY360bW
-7kpU+raPELA3mTCdIG2x
-=BoQ0
------END PGP SIGNATURE-----
diff --git a/thunderbird-60.7.2.source.tar.xz b/thunderbird-60.7.2.source.tar.xz
new file mode 100644
index 0000000..1c79625
--- /dev/null
+++ b/thunderbird-60.7.2.source.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fc89a5f66b17d554fc0b9c153483edcc74b1bacc916dfd6dccead8478060af31
+size 283874432
diff --git a/thunderbird-60.7.2.source.tar.xz.asc b/thunderbird-60.7.2.source.tar.xz.asc
new file mode 100644
index 0000000..86dfa5a
--- /dev/null
+++ b/thunderbird-60.7.2.source.tar.xz.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.14 (GNU/Linux)
+
+iQIcBAABCAAGBQJdC7iwAAoJEPGmZo+7fVcu+FMP/1KDApwEgahe7KIaKXP9xY3O
+oNFcnnat9UNpNJcnwbXv0Ktf6uDLQU1Bn/nUyzq/iH0l6FGa2HNGFj6k1EUP7tYK
+KnNW3RtfCMHplJudbYzV4HSiiII+LnwiBmcNVCfGsr3kGvhjbExYFDDV4ighMuba
+3yedSTgA1W+k2ABSQFL+WrEa+Bm2MIjRY5CTvpwXvATYDjNRIB6e8pdew8WemKdL
+pus3Fl5trhu58/hGcFICHpH6Igjc3OCPiKiGyxLL9iHjZhGri8cdFk8WqPZB2xKX
+7rYA6CB0KM90ymJQ7nKYodl09EQ9TF8FZr/RE5XjjHtlupKGYeQo01z7bpHrxxdW
+cl3QuxeBrNCj/CfJcmdiTClLecF0QsCdmS75DegOUXHDwvJNwtB4StbDcJHv4ccD
+94eZNdHzHqFxzrkSy8I0OVIMDZm/LTkPh92UrE326LGZKMhzYesbEX21umzr7ldh
+L9CDzazifQoX5qm7NYGWF3+bvb46JrzQgegfWV+OXyCQZeM1eJQkdTU7DqXfw+cW
+Jq88FS3vd2BbUMHpAgZTvjCl4IcrcJkD648wShG8PchnMj0Jn3+YyBZLmMn6M1fE
+dN6Y1c856qb3k2HFGUrJR5GlgCANlaZn7i7DlZHyeYeMyN3KqwoTGfX8CKByyfC5
+SEyIYofj+uGCxyuK2ZMd
+=Qgho
+-----END PGP SIGNATURE-----