diff --git a/postfix-3.2.0.tar.gz b/postfix-3.2.0.tar.gz
deleted file mode 100644
index 272d3e6..0000000
--- a/postfix-3.2.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:420726e79622620394fd17799e49268dada7041ea067ca3aa1c8bf155b9aa487
-size 4389547
diff --git a/postfix-3.2.2.tar.gz b/postfix-3.2.2.tar.gz
new file mode 100644
index 0000000..ed3f382
--- /dev/null
+++ b/postfix-3.2.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d06849418d119d09366997b2b481bb23f737629769b4e4a52da42fb3ad8b0576
+size 4390318
diff --git a/postfix.changes b/postfix.changes
index 9d63275..6a551c1 100644
--- a/postfix.changes
+++ b/postfix.changes
@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Fri Jun 16 17:45:55 UTC 2017 - michael@stroeder.com
+
+- update to 3.2.2
+  * Security: Berkeley DB versions 2 and later try to read settings
+    from a file DB_CONFIG in the current directory. This undocumented
+    feature may introduce undisclosed vulnerabilities resulting in
+    privilege escalation with Postfix set-gid programs (postdrop,
+    postqueue) before they chdir to the Postfix queue directory,
+    and with the postmap and postalias commands depending on whether
+    the user's current directory is writable by other users. This
+    fix does not change Postfix behavior for Berkeley DB versions
+    < 3, but it does reduce postmap and postalias 'create' performance
+    with Berkeley DB versions 3.0 .. 4.6.
+  * The SMTP server receive_override_options were not restored at
+    the end of an SMTP session, after the options were modified by
+    an smtpd_milter_maps setting of "DISABLE". Milter support
+    remained disabled for the life time of the smtpd process.
+  * After the Postfix 3.2 address/domain table lookup overhaul, the
+    check_sender_access and check_recipient_access features ignored
+    a non-default parent_domain_matches_subdomains setting.
+
 -------------------------------------------------------------------
 Wed Apr 19 20:36:03 UTC 2017 - chris@computersalat.de
 
diff --git a/postfix.spec b/postfix.spec
index 0ae2292..a404671 100644
--- a/postfix.spec
+++ b/postfix.spec
@@ -59,7 +59,7 @@
 %define         _unitdir /lib/systemd
 %endif
 Name:           postfix
-Version:        3.2.0
+Version:        3.2.2
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0