diff --git a/bucket/gnupg.json b/bucket/gnupg.json
index 38194e53a2..cba181228c 100644
--- a/bucket/gnupg.json
+++ b/bucket/gnupg.json
@@ -2,10 +2,10 @@
     "##": "Duplicate of the gpg package",
     "homepage": "https://www.gnupg.org/",
     "description": "A complete and free implementation of the OpenPGP standard.",
-    "version": "2.2.19",
+    "version": "2.2.20",
     "license": "GPL-3.0-or-later",
-    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.2.19_20191207.exe#/dl.7z",
-    "hash": "sha1:a2e95e66918ed8e228c75d59feeee3bf6bc42d1d",
+    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.2.20_20200320.exe#/dl.7z",
+    "hash": "sha1:e6547a9bd2cdca3264ccb36d64f755ba6c8da2ba",
     "pre_install": [
         "Remove-Item \"$dir\\`$PLUGINSDIR\", \"$dir\\gnupg-uninstall.exe.nsis\" -Force -Recurse",
         "New-Item \"$dir\\bin\\gpgconf.ctl\" -Force | Out-Null",