diff --git a/fix-postfix-script.patch b/fix-postfix-script.patch
new file mode 100644
index 0000000..d49d583
--- /dev/null
+++ b/fix-postfix-script.patch
@@ -0,0 +1,22 @@
+--- conf/postfix-script	2016-01-31 16:05:46.000000000 -0500
++++ conf/postfix-script	2016-03-01 19:23:51.000000000 -0500
+@@ -272,10 +277,17 @@
+ 	}
+ 	todo=`echo "$todo" | tr ' ' '\12' | sort -u`
+ 
+-	find $todo ! -user root \
++	if find -L $config_directory/main.cf >/dev/null 2>&1
++	then
++	    FIND="find -L"
++	else
++	    FIND=find
++	fi
++
++	$FIND $todo ! -user root \
+ 	    -exec $WARN not owned by root: {} \;
+ 
+-	find $todo \( -perm -020 -o -perm -002 \) \
++	$FIND $todo \( -perm -020 -o -perm -002 \) \
+ 	    -exec $WARN group or other writable: {} \;
+ 
+ 	# Check Postfix mail_owner-owned directory tree owner/permissions.
diff --git a/postfix-3.2.2.tar.gz b/postfix-3.2.2.tar.gz
deleted file mode 100644
index ed3f382..0000000
--- a/postfix-3.2.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d06849418d119d09366997b2b481bb23f737629769b4e4a52da42fb3ad8b0576
-size 4390318
diff --git a/postfix-3.2.3.tar.gz b/postfix-3.2.3.tar.gz
new file mode 100644
index 0000000..c6ede28
--- /dev/null
+++ b/postfix-3.2.3.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5b0b975d075ea7561028d4109c581549b794aa92d733429ea6d9fa57751140bf
+size 4390567
diff --git a/postfix.changes b/postfix.changes
index 8d507c5..a9f5e58 100644
--- a/postfix.changes
+++ b/postfix.changes
@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Thu Sep 28 08:44:41 UTC 2017 - varkoly@suse.com
+
+- bnc#1016491 postfix raported to log "warning: group or other writable:"
+   on each symlink in config.
+  * Add fix-postfix-script.patch
+
+-------------------------------------------------------------------
+Mon Sep 25 16:25:05 UTC 2017 - michael@stroeder.com
+
+- update to 3.2.3
+ * Extension propagation was broken with "recipient_delimiter = .".
+   This change reverts a change that was trying to be too clever.
+ * The postqueue command would abort with a panic message after it
+   experienced an output write error while listing the mail queue.
+   This change restores a write error check that was lost with the
+   Postfix 3.2 rewrite of the vbuf_print formatter.
+ * Restored sanity checks for dynamically-specified width and precision
+   in format strings (%*, %.*, and %*.*). These checks were lost with
+   the Postfix 3.2 rewrite of the vbuf_print formatter.
+
 -------------------------------------------------------------------
 Thu Aug 17 08:56:15 CEST 2017 - kukuk@suse.de
 
diff --git a/postfix.spec b/postfix.spec
index e0422a1..3f7da6b 100644
--- a/postfix.spec
+++ b/postfix.spec
@@ -59,7 +59,7 @@
 %define         _unitdir /lib/systemd
 %endif
 Name:           postfix
-Version:        3.2.2
+Version:        3.2.3
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0
@@ -79,6 +79,7 @@ Patch5:         %{name}-master.cf.patch
 Patch6:         %{name}-linux45.patch
 Patch7:         %{name}-ssl-release-buffers.patch
 Patch8:         %{name}-vda-v14-3.0.3.patch
+Patch9:         fix-postfix-script.patch	
 
 BuildRequires:  ca-certificates
 BuildRequires:  cyrus-sasl-devel
@@ -194,6 +195,7 @@ PostgreSQL.
 %patch6
 %patch7
 %patch8
+%patch9
 
 # ---------------------------------------------------------------------------