diff --git a/glibc.spec b/glibc.spec
index 7cd147e..657586f 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir  glibc-2.26-213-g5f9409b787
+%define glibcsrcdir  glibc-2.26-260-gf4a6be2582
 %define glibcversion 2.26.90
-%define glibcrelease 13%{?dist}
+%define glibcrelease 14%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -2060,6 +2060,15 @@ fi
 %endif
 
 %changelog
+* Fri Sep 01 2017 Florian Weimer <fweimer@redhat.com> - 2.26.90-14
+- Auto-sync with upstream master,
+  commit f4a6be2582b8dfe8adfa68da3dd8decf566b3983:
+- malloc: Abort on heap corruption, without a backtrace (swbz#21754)
+- getaddrinfo: Return EAI_NODATA for gethostbyname2_r with NO_DATA (swbz#21922)
+- getaddrinfo: Fix error handling in gethosts (swbz#21915) (swbz#21922)
+- Place $(elf-objpfx)sofini.os last (swbz#22051)
+- Various locale fixes (swbz#15332, swbz#22044)
+
 * Wed Aug 30 2017 Florian Weimer <fweimer@redhat.com> - 2.26.90-13
 - Drop glibc-rh952799.patch, applied upstream (#952799, swbz#22025)
 - Auto-sync with upstream master,
diff --git a/sources b/sources
index 8740e31..c5585b0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.26-213-g5f9409b787.tar.gz) = d1b76d58f9f8896dea792dbfd2afb832ded192349a144ac71b4ce446e03b5a4bc6a4d2877791792ec0355375c80ac40e945d1f08dc9932cfa0f28e29887e5530
+SHA512 (glibc-2.26-260-gf4a6be2582.tar.gz) = b9c525c55fd77802a110d9c555e1307d217a241f957774d1b5f1cd179279e17a30e2cd5e6d2550bbcd6c23172734cb6c818894f793e0eba29bf93c679349c78a