diff --git a/bucket/gpg.json b/bucket/gpg.json
index 232696b772..146e963099 100644
--- a/bucket/gpg.json
+++ b/bucket/gpg.json
@@ -1,11 +1,11 @@
 {
     "##": "Duplicate of the gnupg package",
-    "version": "2.3.7",
+    "version": "2.3.8",
     "description": "A complete and free implementation of the OpenPGP standard.",
     "homepage": "https://www.gnupg.org/",
     "license": "GPL-3.0-or-later",
-    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.3.7_20220711.exe#/dl.7z",
-    "hash": "18bcf08b2ac4db46a216f3620b1d43f4704c950a1dcccdae9d508106f2c778c2",
+    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.3.8_20221013.exe#/dl.7z",
+    "hash": "ef179c223990f9dfff2b1e6e9f7468908e0d08b381b3abded2471c29faad234e",
     "installer": {
         "script": [
             "Remove-Item \"$dir\\`$PLUGINSDIR\", \"$dir\\gnupg-uninstall.exe.nsis\" -Force -Recurse",