diff --git a/gnupg-2.3.6.tar.bz2 b/gnupg-2.3.6.tar.bz2
deleted file mode 100644
index 85d4e03..0000000
--- a/gnupg-2.3.6.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:21f7fe2fc5c2f214184ab050977ec7a8e304e58bfae2ab098fec69f8fabda9c1
-size 7604761
diff --git a/gnupg-2.3.6.tar.bz2.sig b/gnupg-2.3.6.tar.bz2.sig
deleted file mode 100644
index 3614025..0000000
Binary files a/gnupg-2.3.6.tar.bz2.sig and /dev/null differ
diff --git a/gnupg-2.3.7.tar.bz2 b/gnupg-2.3.7.tar.bz2
new file mode 100644
index 0000000..f5ee5ef
--- /dev/null
+++ b/gnupg-2.3.7.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ee163a5fb9ec99ffc1b18e65faef8d086800c5713d15a672ab57d3799da83669
+size 7599853
diff --git a/gnupg-2.3.7.tar.bz2.sig b/gnupg-2.3.7.tar.bz2.sig
new file mode 100644
index 0000000..bdfdc3f
Binary files /dev/null and b/gnupg-2.3.7.tar.bz2.sig differ
diff --git a/gpg2.changes b/gpg2.changes
index 3b8c465..8ba8580 100644
--- a/gpg2.changes
+++ b/gpg2.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Tue Jul 12 22:06:02 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- GnuPG 2.3.7:
+  * CVE-2022-34903: garbled status messages could trick gpgme and
+    other parsers to accept faked status lines [boo#1201225]
+  * A number of bug fixes to the gpg command line interface
+  * gpgsm gained a number of new options and got some rework on
+    the PKCS#12 parser to support DFN issues keys
+  * The gpg agent got some added options and UI tweaks
+  * smart card support got a number of bug fixes, and improved
+    support for Technology Nexus cards and Yubikey
+  * The Telesec ESIGN application is now supported
+
 -------------------------------------------------------------------
 Mon May 16 09:12:06 UTC 2022 - Marcus Meissner <meissner@suse.com>
 
diff --git a/gpg2.spec b/gpg2.spec
index 22b46be..24e4ac6 100644
--- a/gpg2.spec
+++ b/gpg2.spec
@@ -17,7 +17,7 @@
 
 
 Name:           gpg2
-Version:        2.3.6
+Version:        2.3.7
 Release:        0
 Summary:        File encryption, decryption, signature creation and verification utility
 License:        GPL-3.0-or-later