diff --git a/CHANGES b/CHANGES
index 402bf5925..5ba106259 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1949,6 +1949,9 @@
 * import: fix crash because encryption is unset
 * create redis with the correct label
 
+[5.2.3]
+* Do not restart stopped apps
+
 [6.0.0]
 * better nginx config for higher loads
 
diff --git a/src/apps.js b/src/apps.js
index 08f39d42e..36e1b80ce 100644
--- a/src/apps.js
+++ b/src/apps.js
@@ -2001,6 +2001,7 @@ function restartAppsUsingAddons(changedAddons, callback) {
         apps = apps.filter(app => app.manifest.addons && _.intersection(Object.keys(app.manifest.addons), changedAddons).length !== 0);
         apps = apps.filter(app => app.installationState !== exports.ISTATE_ERROR); // remove errored apps. let them be 'repaired' by hand
         apps = apps.filter(app => app.installationState !== exports.ISTATE_PENDING_RESTART); // safeguard against tasks being created non-stop restart if we crash on startup
+        apps = apps.filter(app => app.runState !== exports.RSTATE_STOPPED); // don't start stopped apps
 
         async.eachSeries(apps, function (app, iteratorDone) {
             debug(`restartAppsUsingAddons: marking ${app.fqdn} for restart`);