diff --git a/glibc.spec b/glibc.spec
index 161b54a..055a2f2 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir  glibc-2.25
+%define glibcsrcdir  glibc-2.25-3-g93cf93e
 %define glibcversion 2.25
-%define glibcrelease 1%{?dist}
+%define glibcrelease 2%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -2270,6 +2270,13 @@ rm -f *.filelist*
 %endif
 
 %changelog
+* Tue Feb 28 2017 Florian Weimer <fweimer@redhat.com> - 2.25-2
+- Auto-sync with upstream release/2.25/master,
+  commit 93cf93e06ce123439e41d3d62790601c313134cb, fixing:
+- sunrpc: Improvements for UDP client timeout handling (#1346406)
+- sunrpc: Avoid use-after-free read access in clntudp_call (swbz#21115)
+- Fix getting tunable values on big-endian (swbz#21109)
+
 * Wed Feb 08 2017 Carlos O'Donell <carlos@redhat.com> - 2.25-1
 - Update to final released glibc 2.25.
 
diff --git a/sources b/sources
index 662a081..efb2f5b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.25.tar.gz) = b7698fb3eab7e0e331c94170712a699f56d99de46282e7d2183f9f3e4a2edc304038a4ed04a0f29a64e27e701cc2b09545a7081e6e17a622db79e53650b4eb21
+SHA512 (glibc-2.25-3-g93cf93e.tar.gz) = 2fc0b4e1edade43ba7cd59a6eff0eb77058a742ae6b112e76ddde7c5ac951d361f5da74f7cf1bf5b404e1ca1439609cc49a26a2cd2143bec008ffbf2aecafd51