diff --git a/gnupg/.signature b/gnupg/.signature
index 434eb07d7..766cb951d 100644
--- a/gnupg/.signature
+++ b/gnupg/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/dUqbOTHeHnHFnIDxVnaftwyVARXzxMFQOVIf0/H32hJGS/8nIeOEQKv9wx/6U13f83fTgfaNwlpBy0CNWJaIQA=
-SHA256 (Pkgfile) = a68b8a0e9b56bd8b1c515bb240a6a09b07bad12e519a8e28d7c22e59bf9d4757
+RWSE3ohX2g5d/YgVhu4oGE7MURlOKordoHM+aVZ7Xb5sHceeQm7Q3ONQbL3/gWD9PSkuM4k+QSD7EgNsh4Pqy4y8s2Ax2yBtBAs=
+SHA256 (Pkgfile) = f7c87998524b66094ec98c41c5847a62f2a7ba630339e8f6635e3ea8e6e6298d
 SHA256 (.footprint) = 6450874d5d34d8f9e05366e38ae641e0adb79bbd294689579e4f806fbd01ddbb
-SHA256 (gnupg-2.3.6.tar.bz2) = 21f7fe2fc5c2f214184ab050977ec7a8e304e58bfae2ab098fec69f8fabda9c1
+SHA256 (gnupg-2.3.7.tar.bz2) = ee163a5fb9ec99ffc1b18e65faef8d086800c5713d15a672ab57d3799da83669
diff --git a/gnupg/Pkgfile b/gnupg/Pkgfile
index 4e51e40b1..d47a100a3 100644
--- a/gnupg/Pkgfile
+++ b/gnupg/Pkgfile
@@ -5,7 +5,7 @@
 # Optional: openldap
 
 name=gnupg
-version=2.3.6
+version=2.3.7
 release=1
 source=(https://gnupg.org/ftp/gcrypt/$name/$name-$version.tar.bz2)