diff --git a/gnupg/.signature b/gnupg/.signature
index cfb358150..f9f6317fb 100644
--- a/gnupg/.signature
+++ b/gnupg/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/Zj+nOyJNFiKNe3zWCz1UT9G4RvrBwlHWOHRcm1cGJN3OGUUjDrLCGUlcqDVVaprmP94k8zNZTdmk3WH1yjDaAI=
-SHA256 (Pkgfile) = ee50c8ed6faa614cefaf32ee52f7a78975dd1df5a0a5c1253deb64c0db4af9c1
+RWSE3ohX2g5d/QXXDOZsZmO/gS+5Eqr+Mim/R75RdG5LscGbhz4WggySVyUQwBovNY0UWinm2/hM576um8wGvkGQxgLL/KlIPQc=
+SHA256 (Pkgfile) = 0068baf26a3cd7d9293a7027f17ceaf1666a63d8a3c2673a8647f0083c5cdeba
 SHA256 (.footprint) = fb5e64bd2babafc327c4672450ca00fb92cd98c0a80e4caa42ff1e60f67c1676
-SHA256 (gnupg-2.2.18.tar.bz2) = 30d37ce2ca55b2b9b61480b2a175a3b22066ab41cd3f84688448919b566dec0a
+SHA256 (gnupg-2.2.19.tar.bz2) = 242554c0e06f3a83c420b052f750b65ead711cc3fddddb5e7274fcdbb4e9dec0
diff --git a/gnupg/Pkgfile b/gnupg/Pkgfile
index a03311f0b..ff262b2af 100644
--- a/gnupg/Pkgfile
+++ b/gnupg/Pkgfile
@@ -5,7 +5,7 @@
 # Depends on:  libgcrypt, libksba, pinentry, npth
 
 name=gnupg
-version=2.2.18
+version=2.2.19
 release=1
 source=(ftp://ftp.gnupg.org/gcrypt/$name/$name-$version.tar.bz2)