diff --git a/.gitignore b/.gitignore
index 0f1c1d6..2ca6687 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@
 /synapse-0.27.3.tar.gz
 /synapse-0.28.1.tar.gz
 /synapse-0.29.1.tar.gz
+/synapse-0.31.1.tar.gz
diff --git a/matrix-synapse.spec b/matrix-synapse.spec
index d666494..3514d91 100644
--- a/matrix-synapse.spec
+++ b/matrix-synapse.spec
@@ -3,7 +3,7 @@
 %{?python_enable_dependency_generator}
 
 Name:       matrix-%{srcname}
-Version:    0.29.1
+Version:    0.31.1
 Release:    1%{?dist}
 Summary:    A Matrix reference homeserver written in Python using Twisted
 License:    ASL 2.0
@@ -44,6 +44,7 @@ BuildRequires:  python2-systemd
 BuildRequires:  python2-twisted >= 16.0.0
 BuildRequires:  python2-ujson
 BuildRequires:  python2-unpaddedbase64 >= 1.1.0
+BuildRequires:  python2-prometheus_client
 BuildRequires:  python2-pyyaml
 BuildRequires:  systemd
 BuildRequires:  python2-mock
@@ -116,6 +117,10 @@ exit 0
 
 
 %changelog
+* Wed Jun 13 2018 Jeremy Cline <jeremy@jcline.org> - 0.31.1-1
+- Update to v0.31.1
+- Fix CVE-2018-12291
+
 * Thu May 24 2018 Jeremy Cline <jeremy@jcline.org> - 0.29.1-1
 - Update to the latest upstream release.
 - Use the Python dependency generator.
diff --git a/sources b/sources
index 0380a7c..3ced855 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (synapse-0.29.1.tar.gz) = 1460289831b14c523dc4f39798aac333651fe971c7f061abb560f601c0653b4a81b53324cb681b742e438ac2fd8361875e448ff334e6a138ff480b9fc9a77681
+SHA512 (synapse-0.31.1.tar.gz) = 5b80d12cf5b0147b7217c9685c702bc73494759bf892f1c3f4167fe88596872bdc12d300942ef4c5586c2b9ee540058cbd9ec0e4c8af6466eaf57444e3dd657e