diff --git a/packages/packages.4 b/packages/packages.4
index d8898fd0..9b36315a 100644
--- a/packages/packages.4
+++ b/packages/packages.4
@@ -1,38 +1,38 @@
 #  packages.4 the list of packages for use with gpg4win-4.x -*- sh -*-
 #
 # The download script processes the statements here to
 # actually download the packages.  The syntax is trivial:
 #
 # If the first non whitespace character of a line is #, the line is
 # considered a comment.  If the first word of a line is "server", the
 # rest of the line will be taken as the base URL for following file
 # commands.  If the first word of a line is "file" the rest of the
 # line will be appended to the current base URL (with a / as
 # delimiter).  The statement "chk" is followed by the SHA256 checksum of
 # the last file.
 
 server https://gnupg.org/ftp/gcrypt
 
 # All tarballs from this server are verified with an openpgp
 # signature made by "Werner Koch (dist sig)" or one of the other
 # gnupg main contributors.
 
 # last changed 2022-04-22
 # by wk
 # verified: swdb.lst
 file libgcrypt/libgcrypt-1.10.1.tar.bz2
 chk ef14ae546b0084cd84259f61a55e07a38c3b53afc0f546bffcef2f01baffe9de
 
 # last changed 2022-04-25
 # by wk
 # verified: swdb.lst/build_dir
-file gnupg/gnupg-2.3.6.tar.bz2
-chk  21f7fe2fc5c2f214184ab050977ec7a8e304e58bfae2ab098fec69f8fabda9c1
+file gnupg/gnupg-2.3.7.tar.bz2
+chk  ee163a5fb9ec99ffc1b18e65faef8d086800c5713d15a672ab57d3799da83669
 
-name gnupg-w32-2.3.6_20220425-bin.exe
-file binary/gnupg-w32-2.3.6_20220425.exe
-chk  1a18adbb24868e14a40ccbd60003108840e238c0893e7bb6908805ae067eb0e8
+name gnupg-w32-2.3.7_20220711-bin.exe
+file binary/gnupg-w32-2.3.7_20220711.exe
+chk  18bcf08b2ac4db46a216f3620b1d43f4704c950a1dcccdae9d508106f2c778c2
 
-name gnupg-w32-2.3.6_20220425-src.tar.xz
-file binary/gnupg-w32-2.3.6_20220425.tar.xz
-chk  2904aa21bcaae85dbd180e1931516bc2573ff2bd9b8647fe60ac9739a77ecbb3
+name gnupg-w32-2.3.7_20220711-src.tar.xz
+file binary/gnupg-w32-2.3.7_20220711.tar.xz
+chk  06f07a9cea143e468ccc71878a771e86c7a6138e036879b8b7ebe6dbeab4de41