diff --git a/bucket/gnupg.json b/bucket/gnupg.json
index 668ebbc0f6..a234faab5c 100644
--- a/bucket/gnupg.json
+++ b/bucket/gnupg.json
@@ -1,11 +1,11 @@
 {
     "##": "Duplicate of the gpg package",
-    "version": "2.5.16",
+    "version": "2.5.17",
     "description": "A complete and free implementation of the OpenPGP standard.",
     "homepage": "https://www.gnupg.org/",
     "license": "GPL-3.0-or-later",
-    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.5.16_20251230.exe#/dl.7z",
-    "hash": "sha1:250e1d3c3b4924188e6457a4c1f0d33ff2b2fe9e",
+    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.5.17_20260127.exe#/dl.7z",
+    "hash": "sha1:31ac31fe8f5b4f3e3ae8e5e6a70c967a59f66e63",
     "installer": {
         "script": [
             "Remove-Item \"$dir\\`$PLUGINSDIR\" -Force -Recurse",