diff --git a/glibc.spec b/glibc.spec
index 4e6f783..73ecd93 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir glibc-2.28.9000-299-g346ef23f19
+%define glibcsrcdir glibc-2.28.9000-306-gbcdaad21d4
 %define glibcversion 2.28.9000
-%define glibcrelease 17%{?dist}
+%define glibcrelease 18%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -1899,6 +1899,15 @@ fi
 %files -f compat-libpthread-nonshared.filelist -n compat-libpthread-nonshared
 
 %changelog
+* Tue Nov 20 2018 DJ Delorie <dj@redhat.com> - 2.28.9000-18
+- Auto-sync with upstream branch master,
+  commit bcdaad21d4635931d1bd3b54a7894276925d081d.
+- malloc: tcache double free check
+- [AArch64] Adjust writeback in non-zero memset
+- Update config.guess and config.sub to current versions.
+- support: Print timestamps in timeout handler
+- Use STRFMON_LDBL_IS_DBL instead of __ldbl_is_dbl.
+
 * Fri Nov 16 2018 Florian Weimer <fweimer@redhat.com> - 2.28.9000-17
 - Auto-sync with upstream branch master,
   commit 346ef23f197a0c8ba807c344bd39101b711050ee.
diff --git a/sources b/sources
index dbaab66..5c633ba 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.28.9000-299-g346ef23f19.tar.xz) = 693e03cb10ff2b4688c5e0a6ee0e4517d857a8eccb52262f30ea3498663b580187fceb629421559a98f19420472e421f60f30bdffc55446372fa2791713e74a0
+SHA512 (glibc-2.28.9000-306-gbcdaad21d4.tar.xz) = 107bddbb57e3e8e2022daa79ec2e10c104050052ca24006a9cf2cfedaf4b709f25e323474fda866721e9351903f3fddda203f020b8c0e435b89aa9f1a3b6c498