diff --git a/postfix-3.2.3.tar.gz b/postfix-3.2.3.tar.gz
deleted file mode 100644
index c6ede28..0000000
--- a/postfix-3.2.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5b0b975d075ea7561028d4109c581549b794aa92d733429ea6d9fa57751140bf
-size 4390567
diff --git a/postfix-3.2.4.tar.gz b/postfix-3.2.4.tar.gz
new file mode 100644
index 0000000..a866e28
--- /dev/null
+++ b/postfix-3.2.4.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ec55ebaa2aa464792af8d5ee103eb68b27a42dc2b36a02fee42dafbf9740c7f6
+size 4390376
diff --git a/postfix.changes b/postfix.changes
index 39a90d4..e004280 100644
--- a/postfix.changes
+++ b/postfix.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Mon Oct 30 12:12:08 UTC 2017 - michael@stroeder.com
+
+- update to 3.2.4
+  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
+    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
+    records associated with an intermediate CA certificate. Problem
+    report and initial fix by Erwan Legrand.
+  * Missing dynamicmaps support in the Postfix sendmail command.
+    This broke authorized_submit_users settings that use a
+    dynamically-loaded map type. Problem reported by Ulrich Zehl.
+
 -------------------------------------------------------------------
 Fri Oct 20 12:27:12 UTC 2017 - varkoly@suse.com
 
diff --git a/postfix.spec b/postfix.spec
index e2caa82..3e3a6f6 100644
--- a/postfix.spec
+++ b/postfix.spec
@@ -62,7 +62,7 @@
 %define         _unitdir /lib/systemd
 %endif
 Name:           postfix
-Version:        3.2.3
+Version:        3.2.4
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0