diff --git a/bucket/gpg.json b/bucket/gpg.json
index 1c36bb29c6..838acad855 100644
--- a/bucket/gpg.json
+++ b/bucket/gpg.json
@@ -2,10 +2,10 @@
     "##": "Duplicate of the gnupg package",
     "homepage": "https://www.gnupg.org/",
     "description": "A complete and free implementation of the OpenPGP standard.",
-    "version": "2.2.20",
+    "version": "2.2.21",
     "license": "GPL-3.0-or-later",
-    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.2.20_20200320.exe#/dl.7z",
-    "hash": "sha1:e6547a9bd2cdca3264ccb36d64f755ba6c8da2ba",
+    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.2.21_20200709.exe#/dl.7z",
+    "hash": "sha1:e707e54bc57f19704a5e302119ea4d509486892f",
     "pre_install": [
         "Remove-Item \"$dir\\`$PLUGINSDIR\", \"$dir\\gnupg-uninstall.exe.nsis\" -Force -Recurse",
         "New-Item \"$dir\\bin\\gpgconf.ctl\" -Force | Out-Null",