diff --git a/glibc.spec b/glibc.spec
index fe7855b..5529eda 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir glibc-2.28-35-g3e8d8dd5af
+%define glibcsrcdir glibc-2.28-44-gf44c2ca5ea
 %define glibcversion 2.28
-%define glibcrelease 19%{?dist}
+%define glibcrelease 20%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -1901,6 +1901,16 @@ fi
 %files -f compat-libpthread-nonshared.filelist -n compat-libpthread-nonshared
 
 %changelog
+* Mon Nov 19 2018 Florian Weimer <fweimer@redhat.com> - 2.28-20
+- Auto-sync with upstream branch release/2.28/master,
+  commit f44c2ca5eacd2df76fc38be75f9ebb8f0ff555eb:
+- Update system call list to Linux 4.19
+- time: Fix tzfile low-memory assertion failure (swbz#21716)
+- Add newlines in __libc_fatal calls (swbz#20271)
+- nscd: Fix use-after-free in addgetnetgrentX (swbz#23520)
+- malloc: Additional heap integrity checks
+- Add an additional test to resolv/tst-resolv-network.c (swbz#17630)
+
 * Fri Nov 09 2018 Florian Weimer <fweimer@redhat.com> - 2.28-19
 - Auto-sync with upstream branch release/2.28/master,
   commit 3e8d8dd5afba18a847ff7a80f473336f777cc329:
diff --git a/sources b/sources
index f3c1771..9926429 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.28-35-g3e8d8dd5af.tar.xz) = 53933137d4dbca3c9d4b74c7743996623f516d2b0380de710a54ce25c01bdb03ef2af81751897acfd88f7d322a7212ac49d67f32e5629304cef1fbfe4f7410e4
+SHA512 (glibc-2.28-44-gf44c2ca5ea.tar.xz) = c95747900329098ac2e1af47547fc98665d753690b5edb65659219bf76df5b7d49363f5b5c8acb8ec8a6e2c039a924b9df41a694e57241be8bdf68e6e5d50781