diff --git a/security/gnupg/Makefile b/security/gnupg/Makefile
index 125fc45bb9a4..8f082f59e2f5 100644
--- a/security/gnupg/Makefile
+++ b/security/gnupg/Makefile
@@ -1,90 +1,90 @@
 PORTNAME=	gnupg
-DISTVERSION=	2.4.8
+DISTVERSION=	2.4.9
 CATEGORIES=	security
 MASTER_SITES=	GNUPG
 
 MAINTAINER=	adridg@FreeBSD.org
 COMMENT=	Complete and free PGP implementation
 WWW=		https://www.gnupg.org/
 
 LICENSE=	GPLv3 LGPL3
 LICENSE_COMB=	multi
 LICENSE_FILE_GPLv3=	${WRKSRC}/COPYING
 LICENSE_FILE_LGPL3=	${WRKSRC}/COPYING.LGPL3
 
 LIB_DEPENDS=	libassuan.so:security/libassuan \
 		libgcrypt.so:security/libgcrypt \
 		libgpg-error.so:security/libgpg-error \
 		libksba.so:security/libksba \
 		libnpth.so:devel/npth
 RUN_DEPENDS=	pinentry:security/pinentry
 
 USES=		compiler:c11 cpe gmake iconv makeinfo pkgconfig readline sqlite \
 		tar:bzip2
 
 CPE_VENDOR=	gnupg
 
 # Odd minor-versions are the development branch; in particular 2.5 is
 # close to being a new 2.6, but we don't want portscout informing about it.
 PORTSCOUT=	limitw:1,even
 
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS=	--disable-ntbtls \
 		--enable-gpg-is-gpg2
 
 TEST_ARGS=	TESTARGS=--parallel
 TEST_TARGET=	check
 
 CONFLICTS=	dirmngr
 
 INFO=		gnupg
 
 OPTIONS_DEFINE=		DOCS GNUTLS LARGE_RSA LDAP NLS SCDAEMON SUID_GPG \
 			WKS_SERVER
 OPTIONS_DEFAULT=	GNUTLS SCDAEMON WKS_SERVER
 OPTIONS_SUB=		yes
 
 LARGE_RSA_DESC=		Enable support for 8192-bit RSA keys
 LDAP_DESC=		LDAP keyserver interface
 SCDAEMON_DESC=		Enable Smartcard daemon (with libusb)
 SUID_GPG_DESC=		Install GPG as SUID root
 WKS_SERVER_DESC=	Install the Web Key Service server
 
 GNUTLS_LIB_DEPENDS=		libgnutls.so:security/gnutls
 GNUTLS_CONFIGURE_ENABLE=	gnutls
 
 LARGE_RSA_CONFIGURE_ENABLE=	large-secmem
 
 LDAP_USES=		ldap
 LDAP_CONFIGURE_WITH=	ldap=${LOCALBASE}
 LDAP_LIBS=		-L${LOCALBASE}/lib
 
 NLS_USES=		gettext
 NLS_CONFIGURE_ENABLE=	nls
 
 SCDAEMON_CONFIGURE_ENABLE=	scdaemon
 
 WKS_SERVER_CONFIGURE_ENABLE=	wks-tools
 
 .include <bsd.port.options.mk>
 
 .if ${PORT_OPTIONS:MGNUTLS} && ${PORT_OPTIONS:MLDAP}
 PLIST_SUB+=	DIRMNGRLDAP=""
 .else
 PLIST_SUB+=	DIRMNGRLDAP="@comment "
 .endif
 
 # Touch the texinfo files to force makeinfo to run.  This fixes Linuxisms in
 # the paths in the man pages.
 pre-build:
 	${TOUCH} ${WRKSRC}/doc/*.texi
 
 post-install:
 	${MV} ${STAGEDIR}${PREFIX}/bin/gpgsplit ${STAGEDIR}${PREFIX}/bin/gpgsplit2
 	${MV} ${STAGEDIR}${DATADIR}/help*.txt ${STAGEDIR}${DOCSDIR}
 
 # Necessary because of --enable-gpg-is-gpg2
 pre-test:
 	${LN} -s gpg ${WRKSRC}/bin/gpg2
 
 .include <bsd.port.mk>
diff --git a/security/gnupg/distinfo b/security/gnupg/distinfo
index 263b7cea5e9f..5340ebf6627d 100644
--- a/security/gnupg/distinfo
+++ b/security/gnupg/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1747922827
-SHA256 (gnupg-2.4.8.tar.bz2) = b58c80d79b04d3243ff49c1c3fc6b5f83138eb3784689563bcdd060595318616
-SIZE (gnupg-2.4.8.tar.bz2) = 8017685
+TIMESTAMP = 1767649009
+SHA256 (gnupg-2.4.9.tar.bz2) = dd17ab2e9a04fd79d39d853f599cbc852062ddb9ab52a4ddeb4176fd8b302964
+SIZE (gnupg-2.4.9.tar.bz2) = 8086407