diff --git a/libinput.spec b/libinput.spec
index 8d39055..c085be6 100644
--- a/libinput.spec
+++ b/libinput.spec
@@ -4,7 +4,7 @@
 %global gitversion 58abea394
 
 Name:           libinput
-Version:        1.31.0
+Version:        1.31.1
 Release:        1%{?gitdate:.%{gitdate}git%{gitversion}}%{?dist}
 Summary:        Input device library
 
@@ -161,6 +161,9 @@ intended to be run by users.
 
 
 %changelog
+* Thu Apr 02 2026 Peter Hutterer <peter.hutterer@redhat.com> - 1.31.1-1
+- libinput 1.31.1 (CVE-2026-35093, CVE-2026-35094)
+
 * Fri Feb 13 2026 Peter Hutterer <peter.hutterer@redhat.com> - 1.31.0-1
 - libinput 1.31.0
 
diff --git a/sources b/sources
index d71d461..de5c358 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (libinput-1.31.0.tar.bz2) = 788bec27c08e440915b97ba701e4f2345633fbf1c3bf553a7bbface854dcc4999051a042854ba2b143f0ec363d7e0aaff167b0b509245b271e19dd1f922eab88
+SHA512 (libinput-1.31.1.tar.bz2) = 7f60f6180e6e62ca43f557dd2bb77bce00be6afaab6a682ca03d6b83c1d130bd32188c5b3e5489831887b286099040aa181384b364625b4b9f6d3dd9574124c7