diff --git a/gnupg/.signature b/gnupg/.signature
index b496dd3d6..b1963bc31 100644
--- a/gnupg/.signature
+++ b/gnupg/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/T7eUfDRWOU3TPrIZQCxWQBBI0/WpxzL+ZU9JI0zNj+U6u8Frio3NCTawXv/vaMLZsNAlik417eC+DH1pr9b/A4=
-SHA256 (Pkgfile) = b3b53e9109bd03be76ac1618901cb155f4e5702c146ea9e62691514bfdc6b1d6
+RWSE3ohX2g5d/Y+B4ZyptNGqr20Wfou7umeEqTbdZRd0AIHTHtCOnVS1u0/14Pd9nq3pOCLaJscwNv+xBi8NrTJxI2snYfZXNg8=
+SHA256 (Pkgfile) = ef310b8881f75792fd16ea0d0196c4b3bb0e58c3ef8790e3d90adb1f1bbbfb7d
 SHA256 (.footprint) = f373300ad88bf157164dceeb0dd4831f53dfe60fd437b288cb6d67043338a1c2
-SHA256 (gnupg-2.2.8.tar.bz2) = 777b4cb8ced21965a5053d4fa20fe11484f0a478f3d011cef508a1a49db50dcd
+SHA256 (gnupg-2.2.9.tar.bz2) = 6278eaabffa1ebc9fa2ceb3dc53eea9a1505ab02a668a86dd6fec06951af2164
diff --git a/gnupg/Pkgfile b/gnupg/Pkgfile
index 92f48e369..980d18482 100644
--- a/gnupg/Pkgfile
+++ b/gnupg/Pkgfile
@@ -5,7 +5,7 @@
 # Depends on:  libgcrypt, libksba, pinentry, npth
 
 name=gnupg
-version=2.2.8
+version=2.2.9
 release=1
 source=(ftp://ftp.gnupg.org/gcrypt/$name/$name-$version.tar.bz2)