Commit 4a54794d18 upgraded Thunderbird's version to 38.6.0 (accidentally?), but didn't change the hash. This wasn't caught due to tarballs.nixos.org being keyed on hash only.
4a54794d18
d25135ff6e