diff --git a/glibc.spec b/glibc.spec
index 9522712..634ac1f 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir  glibc-2.24-519-g81e0662
+%define glibcsrcdir  glibc-2.24-531-gcecbc79
 %define glibcversion 2.24.90
-%define glibcrelease 25%{?dist}
+%define glibcrelease 26%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -1050,6 +1050,7 @@ build()
 %ifarch %{multiarcharches}
 		--enable-multi-arch \
 %endif
+		--enable-stack-protector=strong \
 		--enable-obsolete-rpc \
 		--enable-systemtap \
 		${core_with_options} \
@@ -2285,6 +2286,11 @@ rm -f *.filelist*
 %endif
 
 %changelog
+* Mon Dec 26 2016 Florian Weimer <fweimer@redhat.com> - 2.24.90-26
+- Auto-sync with upstream master,
+  commit cecbc7967f0bcac718b6f8f8942b58403c0e917c
+- Enable stack protector for most of glibc (#1406731)
+
 * Fri Dec 23 2016 Carlos O'Donell <carlos@systemhalted.org> - 2.24.90-25
 - Auto-sync with upstream master,
   commit 81e0662e5f2c342ffa413826b7b100d56677b613, fixing:
diff --git a/sources b/sources
index ad021e6..f3ef878 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.24-519-g81e0662.tar.gz) = d22c1f225978eb9eb565fe478b9660b57b546a9c20d1b9df2e9438a50b4142b5f7983785d357e77331d66403ac4f5c45bd8fdba20b39204add995de7aa11a238
+SHA512 (glibc-2.24-531-gcecbc79.tar.gz) = 4c3875426a54b9fce817d1a4c7782e9f5b3b6d298107e8c75263dfe33c0164beafad2480eb5a1eed34401e1add6d608e99e55a9411d199770c9b3a98e3d7cffb