diff --git a/gnupg/.signature b/gnupg/.signature
index 2dac3aac8..cfb358150 100644
--- a/gnupg/.signature
+++ b/gnupg/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/fZ1BPlMKbGc/G3xEweGufMg5wLp7PMNGGebH14Lwsq43Bx8T1xKy6rxqrWyZJeBwzIWO7J3V5fPzMJblUZMcwY=
-SHA256 (Pkgfile) = 32f6a18ba24cddd66e0a816e307e7bc18fe79f421432dcf7878082c764a69f7f
+RWSE3ohX2g5d/Zj+nOyJNFiKNe3zWCz1UT9G4RvrBwlHWOHRcm1cGJN3OGUUjDrLCGUlcqDVVaprmP94k8zNZTdmk3WH1yjDaAI=
+SHA256 (Pkgfile) = ee50c8ed6faa614cefaf32ee52f7a78975dd1df5a0a5c1253deb64c0db4af9c1
 SHA256 (.footprint) = fb5e64bd2babafc327c4672450ca00fb92cd98c0a80e4caa42ff1e60f67c1676
-SHA256 (gnupg-2.2.17.tar.bz2) = afa262868e39b651a2db4c071fba90415154243e83a830ca00516f9a807fd514
+SHA256 (gnupg-2.2.18.tar.bz2) = 30d37ce2ca55b2b9b61480b2a175a3b22066ab41cd3f84688448919b566dec0a
diff --git a/gnupg/Pkgfile b/gnupg/Pkgfile
index 716248a33..a03311f0b 100644
--- a/gnupg/Pkgfile
+++ b/gnupg/Pkgfile
@@ -5,7 +5,7 @@
 # Depends on:  libgcrypt, libksba, pinentry, npth
 
 name=gnupg
-version=2.2.17
+version=2.2.18
 release=1
 source=(ftp://ftp.gnupg.org/gcrypt/$name/$name-$version.tar.bz2)