diff --git a/gnupg/.footprint b/gnupg/.footprint
index f69af0889..678b17a07 100644
--- a/gnupg/.footprint
+++ b/gnupg/.footprint
@@ -16,6 +16,7 @@ drwxr-xr-x	root/root	usr/bin/
 -rwxr-xr-x	root/root	usr/bin/kbxutil
 -rwxr-xr-x	root/root	usr/bin/watchgnupg
 drwxr-xr-x	root/root	usr/lib/
+-rwxr-xr-x	root/root	usr/lib/gpg-auth
 -rwxr-xr-x	root/root	usr/lib/gpg-check-pattern
 -rwxr-xr-x	root/root	usr/lib/gpg-pair-tool
 -rwxr-xr-x	root/root	usr/lib/gpg-preset-passphrase
diff --git a/gnupg/.signature b/gnupg/.signature
index 766cb951d..69c81e5d7 100644
--- a/gnupg/.signature
+++ b/gnupg/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/YgVhu4oGE7MURlOKordoHM+aVZ7Xb5sHceeQm7Q3ONQbL3/gWD9PSkuM4k+QSD7EgNsh4Pqy4y8s2Ax2yBtBAs=
-SHA256 (Pkgfile) = f7c87998524b66094ec98c41c5847a62f2a7ba630339e8f6635e3ea8e6e6298d
-SHA256 (.footprint) = 6450874d5d34d8f9e05366e38ae641e0adb79bbd294689579e4f806fbd01ddbb
-SHA256 (gnupg-2.3.7.tar.bz2) = ee163a5fb9ec99ffc1b18e65faef8d086800c5713d15a672ab57d3799da83669
+RWSE3ohX2g5d/Y8gMwvwTZjQb4EyY+sL1ZEZAKVKwMFB9l7a8d6tkvzopdDdq/pkwurcM1dLlPFWbWfKYVq8+LRq0PuhOsz1NAk=
+SHA256 (Pkgfile) = 3e4a569821411ecbc36cecdc69ebef987521657eca30c1a7ae21f29ddb00267a
+SHA256 (.footprint) = c2951faf9544a9cc3546a88e7b78e2f4c0e10ae923e17c11a6d9069ede5c3c21
+SHA256 (gnupg-2.3.8.tar.bz2) = 540b7a40e57da261fb10ef521a282e0021532a80fd023e75fb71757e8a4969ed
diff --git a/gnupg/Pkgfile b/gnupg/Pkgfile
index d47a100a3..b828a37df 100644
--- a/gnupg/Pkgfile
+++ b/gnupg/Pkgfile
@@ -5,7 +5,7 @@
 # Optional: openldap
 
 name=gnupg
-version=2.3.7
+version=2.3.8
 release=1
 source=(https://gnupg.org/ftp/gcrypt/$name/$name-$version.tar.bz2)