diff --git a/glibc.spec b/glibc.spec
index e0a7965..f65a5a2 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir glibc-2.26.9000-792-gf6e965ee94
+%define glibcsrcdir glibc-2.26.9000-811-gcccb6d4e87
 %define glibcversion 2.26.9000
-%define glibcrelease 27%{?dist}
+%define glibcrelease 28%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -2108,6 +2108,18 @@ fi
 %endif
 
 %changelog
+* Thu Nov 23 2017 Florian Weimer <fweimer@redhat.com> - 2.26.9000-28
+- Auto-sync with upstream branch master,
+  commit cccb6d4e87053ed63c74aee063fa84eb63ebf7b8:
+- sigwait can fail with EINTR (#1516394)
+- Add memfd_create function
+- resolv: Fix p_secstodate overflow handling (swbz#22463)
+- resolv: Obsolete p_secstodate
+- Avoid use of strlen in getlogin_r (swbz#22447)
+- lv_LV locale: fix collation (swbz#15537)
+- S390: Add cfi information for start routines in order to stop unwinding
+- aarch64: Optimized memset for falkor
+
 * Sun Nov 19 2017 Florian Weimer <fweimer@redhat.com> - 2.26.9000-27
 - Auto-sync with upstream branch master,
   commit f6e965ee94b37289f64ecd3253021541f7c214c3:
diff --git a/sources b/sources
index 804c716..2d91365 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.26.9000-792-gf6e965ee94.tar.gz) = 930d39ac674831210cb957e549ed0912bec6fd95f183e45def15d42a992ff3236e28048f46804a45e7e247028be6d0017052772434bcf2bd2925372d59ceddfd
+SHA512 (glibc-2.26.9000-811-gcccb6d4e87.tar.gz) = 271eff1afef521d4126f188e5a03f571ff5f98342fd1aeaaf587de9af096c88b2bd909b896ed59e8661660804904f0e71eec8e35526c8f5c9da45c09311097bb