diff --git a/glibc.spec b/glibc.spec
index 93c9492..4dc76c8 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,4 +1,4 @@
-%global glibcsrcdir glibc-2.39.9000-180-g16c8dfba14
+%global glibcsrcdir glibc-2.39.9000-185-g41903cb6f4
 %global glibcversion 2.39.9000
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
@@ -170,7 +170,7 @@ Version: %{glibcversion}
 # - It allows using the Release number without the %%dist tag in the dependency
 #   generator to make the generated requires interchangeable between Rawhide
 #   and ELN (.elnYY < .fcXX).
-%global baserelease 14
+%global baserelease 15
 Release: %{baserelease}%{?dist}
 
 # Licenses:
@@ -2516,6 +2516,15 @@ update_gconv_modules_cache ()
 %endif
 
 %changelog
+* Thu Apr 25 2024 Florian Weimer <fweimer@redhat.com> - 2.39.9000-15
+- Auto-sync with upstream branch master,
+  commit 41903cb6f460d62ba6dd2f4883116e2a624ee6f8:
+- GLIBC-SA-2024-0004: add commit for 2.31 branch
+- benchtests: Add difficult strstr needle for bruteforce algorithms
+- x86: Define MINIMUM_X86_ISA_LEVEL in config.h [BZ #31676]
+- LoongArch: Add glibc.cpu.hwcap support.
+- nptl: Fix tst-cancel30 on kernels without ppoll_time64 support
+
 * Tue Apr 23 2024 Arjun Shankar <arjun@redhat.com> - 2.39.9000-14
 - Drop glibc-rh827510.patch, fixed differently upstream.
 - Auto-sync with upstream branch master,
diff --git a/sources b/sources
index 0623ae0..a605cd7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.39.9000-180-g16c8dfba14.tar.xz) = fb4980c13aa21a9318d5d4741165718bc40214db5020ac0dbfd0b0091820e49dea9a073f04cc1af94970dcec734a511e553ac6b708ac8478cadabe5a4e7710e0
+SHA512 (glibc-2.39.9000-185-g41903cb6f4.tar.xz) = 68d9ba6060cc2e1f145969824b69b5d64331c1f1b5c9f660ee14f679abae2b8baffb48a413e36e14069ce67704ba461179e0b6f80f5229c39f5db5da0b323c95