diff --git a/glibc.spec b/glibc.spec
index 550c623..e0c1f44 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -1,6 +1,6 @@
-%define glibcsrcdir glibc-2.28.9000-268-g00c86a37d1
+%define glibcsrcdir glibc-2.28.9000-273-g43257c335a
 %define glibcversion 2.28.9000
-%define glibcrelease 15%{?dist}
+%define glibcrelease 16%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@@ -1899,6 +1899,11 @@ fi
 %files -f compat-libpthread-nonshared.filelist -n compat-libpthread-nonshared
 
 %changelog
+* Fri Nov 09 2018 Florian Weimer <fweimer@redhat.com> - 2.28.9000-16
+- Auto-sync with upstream branch master,
+  commit 43257c335ad6b9e05fb882975e1776ff763164ee:
+- Disable CET for binaries created by older link editors (#1648297)
+
 * Wed Nov 07 2018 Florian Weimer <fweimer@redhat.com> - 2.28.9000-15
 - Auto-sync with upstream branch master,
   commit 00c86a37d1b63044e3169d1f2ebec23447c73f79.
diff --git a/sources b/sources
index 8970362..23bdde3 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glibc-2.28.9000-268-g00c86a37d1.tar.xz) = c96669002573805cd62d1364732301ef89f95c27228f0e106b9c431a0cddd749dd1c981acf453842ab181df2f1e7529925c1acad5f5e8dd7f2d4d1a7926775c6
+SHA512 (glibc-2.28.9000-273-g43257c335a.tar.xz) = 5fa844b9956244fc884feb3165d1ab792fb3e7b2db20f99608de1300a668c3fc6506c805627a53f997e62f4bf65ad742e50959836f8738b72deca5caf1468417