diff --git a/.gitignore b/.gitignore
index 4b8f741..618c85d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,3 +26,4 @@
 /Django-3.1.4.tar.gz
 /Django-3.1.5.tar.gz
 /Django-3.1.6.tar.gz
+/Django-3.1.7.tar.gz
diff --git a/python-django.spec b/python-django.spec
index d495ecf..9297112 100644
--- a/python-django.spec
+++ b/python-django.spec
@@ -1,6 +1,6 @@
 Name:           python-django
 %global         pkgname Django
-%global         ver 3.1.6
+%global         ver 3.1.7
 #global         pre ...
 %global         real_version %{ver}%{?pre:%{pre}}
 Version:        %{ver}%{?pre:~%{pre}}
@@ -322,6 +322,9 @@ cd tests
 
 
 %changelog
+* Fri Mar 05 2021 Matthias Runge <mrunge@redhat.com> - 3.1.7-1
+- update to 3.1.7, fix CVE-2021-23336 (rhbz#1931542)
+
 * Thu Feb 04 2021 Matthias Runge <mrunge@redhat.com> - 3.1.6-1
 - update to 3.1.6, fix CVE-2021-3281 (rhbz#1923734)
 
diff --git a/sources b/sources
index d36f4ef..b8b845f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Django-3.1.6.tar.gz) = fe5baef4aee51cc84292d1f4d3681cff8170c1307aa172b86faa15771af2c3e0b4dbb24ae671ad8ed31c53ab38ed99c64b5deb69d77fc268d8a232f3463c3221
+SHA512 (Django-3.1.7.tar.gz) = a8a24f7f25ff2f3a7b5ebe4cef08c7f1303c78bd33f9a53c10630159d6895a738e863dc1034ad0817ad89275c202b4319aa5949ce89f36ca0b537c8a5c0c407c