diff --git a/glibc.spec b/glibc.spec
index bed1bd4..e193bbf 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir  glibc-2.25-24-g49f97e6
+%define glibcsrcdir  glibc-2.25-45-g47db584c74
 %define glibcversion 2.25
-%define glibcrelease 7%{?dist}
+%define glibcrelease 8%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -2242,6 +2242,18 @@ rm -f *.filelist*
 %endif
 
 %changelog
+* Wed Aug 16 2017 Florian Weimer <fweimer@redhat.com> - 2.25-8
+- Disable SSE2 usage on i686 (#1471427)
+- Auto-sync with upstream release/2.25/master,
+  commit 47db584c74e2bbcf1ba55e62d949c1a738da5e0a:
+- CVE-2017-12132: Reduce EDNS payload size to 1200 bytes (#1477530)
+- Call exit directly in clone (swbz#21512)
+- assert: Suppress pedantic warning caused by statement expression (swbz#21242)
+- x86-64: Use _dl_runtime_resolve_opt only with AVX512F (swbz#21871)
+- powerpc: Fix logbl on power7 (swbz#21280)
+- Avoid .symver on common symbols (swbz#21666)
+- aarch64: Use hidden __GI__dl_argv in rtld startup code
+
 * Thu Jul 06 2017 Florian Weimer <fweimer@redhat.com> - 2.25-7
 - Auto-sync with upstream release/2.25/master,
   commit 49f97e641e4e84a42246655d30adbc4756e67114:
diff --git a/sources b/sources
index 7a90908..668397a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.25-24-g49f97e6.tar.gz) = 277039923a26b20b91dc761b5a8e323282bb912f0049c893fa50c839374425bb2500e88abab7c4cbc12bb79ac75863df8be381e287729a3294f08242ba43947c
+SHA512 (glibc-2.25-45-g47db584c74.tar.gz) = 9211200e524181471e8133d908ff7b4f9ee879caf04d528b414c992f4c9300df6f40512e1910dc84ce661d679127bd576cc290999439a9d340ecffa6b7322da1