diff --git a/curl/PKGBUILD b/curl/PKGBUILD
index 3485b11c..0b1267a2 100644
--- a/curl/PKGBUILD
+++ b/curl/PKGBUILD
@@ -2,7 +2,7 @@
 
 pkgbase=curl
 pkgname=('curl' 'libcurl' 'libcurl-devel')
-pkgver=7.48.0
+pkgver=7.49.0
 pkgrel=1
 pkgdesc="Multi-protocol file transfer utility"
 arch=('i686' 'x86_64')
@@ -13,10 +13,12 @@ makedepends=('heimdal-devel' 'libmetalink-devel' 'libcrypt-devel' 'libidn-devel'
 options=('!libtool' 'strip' '!debug')
 source=("https://curl.haxx.se/download/${pkgname}-${pkgver}.tar.bz2"{,.asc}
         curl-7.32.0-msys2.patch)
-sha256sums=('864e7819210b586d42c674a1fdd577ce75a78b3dda64c63565abe5aefd72c753'
+sha256sums=('14f44ed7b5207fea769ddb2c31bd9e720d37312e1c02315def67923a4a636078'
             'SKIP'
             '703963690bfa95b92e8281b7d9070a12c18bada044c3a7c9995fe9ae5adc5a8f')
-validpgpkeys=('914C533DF9B2ADA2204F586D78E11C6B279D5C91')  # Daniel Stenberg
+validpgpkeys=('914C533DF9B2ADA2204F586D78E11C6B279D5C91'  # Daniel Stenberg
+              '27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2'
+              '4461EAF0F8E9097F48AF0555F9FEAFF9D34A1BDB')
 
 prepare() {
   cd "${pkgname}-${pkgver}"