diff --git a/.gitignore b/.gitignore
index 2ec5133..704df02 100644
--- a/.gitignore
+++ b/.gitignore
@@ -82,3 +82,5 @@ gnupg-2.0.16.tar.bz2.sig
 /gnupg-2.2.13.tar.bz2.sig
 /gnupg-2.2.16.tar.bz2
 /gnupg-2.2.16.tar.bz2.sig
+/gnupg-2.2.17.tar.bz2
+/gnupg-2.2.17.tar.bz2.sig
diff --git a/gnupg2.spec b/gnupg2.spec
index c3b1334..2d0959f 100644
--- a/gnupg2.spec
+++ b/gnupg2.spec
@@ -6,7 +6,7 @@
 
 Summary: Utility for secure communication and data storage
 Name:    gnupg2
-Version: 2.2.16
+Version: 2.2.17
 Release: 1%{?dist}
 
 License: GPLv3+
@@ -204,6 +204,9 @@ make -k check
 
 
 %changelog
+* Mon Jul 15 2019 Tomáš Mráz <tmraz@redhat.com> - 2.2.17-1
+- upgrade to 2.2.17
+
 * Mon Jul  1 2019 Tomáš Mráz <tmraz@redhat.com> - 2.2.16-1
 - upgrade to 2.2.16
 
diff --git a/sources b/sources
index 3e6e780..69514fd 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (gnupg-2.2.16.tar.bz2) = 0e0040905cc4d1d9d29e184cfeda520b43990e4ec459212537c0ce6092de987157e05b1d1a3022398d9b3cbaeea0f58a7e686745f96933e5ac26be4229162247
-SHA512 (gnupg-2.2.16.tar.bz2.sig) = 76fab64386fc46c735f7b0696cd7063910e818ffa32b51dd6f9bab57aef9ca5addbc8e05cf6cf10ec562685c286c6d03aa879204dc129127a10f68dc43e01bd6
+SHA512 (gnupg-2.2.17.tar.bz2) = a3cd094addac62b4b4ec1683005a2bec761ea2aacf6daf904316b1819f4f6a41f256a8d9452cf28cad71b3e68228465baa27ae0eb1fa734fa91542ef0f159c5d
+SHA512 (gnupg-2.2.17.tar.bz2.sig) = f4d577de99cc1b30e00b5c2f0a7a030d24d3e2ecc623622395b03b24ae32045e513a262e4ec9819b9a11cd1e6671acbb9d588277a4982ff3d589fc9a172d2fa8