diff --git a/glibc.spec b/glibc.spec
index 0d2ffb2..29fdb56 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir glibc-2.26.9000-1115-g9a08a366a7
+%define glibcsrcdir glibc-2.26.9000-1125-g860b0240a5
 %define glibcversion 2.26.9000
-%define glibcrelease 40%{?dist}
+%define glibcrelease 41%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -2061,6 +2061,15 @@ fi
 %endif
 
 %changelog
+* Mon Jan 15 2018 Florian Weimer <fweimer@redhat.com> - 2.26.9000-41
+- CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
+  (#1533837)
+- elf: Synchronize DF_1_* flags with binutils (#1439328)
+- Auto-sync with upstream branch master,
+  commit 860b0240a5645edd6490161de3f8d1d1f2786025:
+- aarch64: fix static pie enabled libc when main is in a shared library
+- malloc: Ensure that the consolidated fast chunk has a sane size
+
 * Fri Jan 12 2018 Florian Weimer <fweimer@redhat.com> - 2.26.9000-40
 - libnsl: Do not install libnsl.so, libnsl.a (#1531540)
 - Use unversioned Supplements: for langpacks (#1490725)
diff --git a/sources b/sources
index 817c32b..79e4030 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.26.9000-1115-g9a08a366a7.tar.gz) = 10e969cba69be7b49faf947dccb7d6afec8cdf379f2d5a5d3020cf2cc5d9809157098f63b91f97866c4b0e6e4a4352340d7db5a7adc2fe0069202714a2382423
+SHA512 (glibc-2.26.9000-1125-g860b0240a5.tar.gz) = 9508cbf8a7ce5f54f2fd847213de093b8b788a15d0092d1857742dd8109ba54d7b52d7cdc65ba5500c80de493e92b0e059f7daaec2870cb1fbc6ea9de3cf5808