From 14b85031e4b0c8a55e70666288b3082620157570 Mon Sep 17 00:00:00 2001
From: Bruce Dubbs <bdubbs@linuxfromscratch.org>
Date: Fri, 30 May 2025 11:00:14 -0500
Subject: [PATCH] Package updates. Update to systemd-257.6. Update to
 setuptools-80.9.0. Update to meson-1.8.1. Update to automake-1.18.

Add Python-3.13.3-security_fixes-1.patch
Add coreutils-9.7-upstream_fix-1.patch
Add perl-5.40.2-upstream_fix-1.patch
---
 chapter01/changelog.xml | 16 ++++++++++++++++
 chapter01/whatsnew.xml  | 20 ++++++++++++++++----
 chapter03/patches.xml   | 29 ++++++++++++++++++-----------
 chapter08/coreutils.xml |  4 ++++
 chapter08/perl.xml      |  4 ++++
 chapter08/python.xml    | 21 +++++++++++++++++----
 packages.ent            | 24 ++++++++++++------------
 patches.ent             | 22 +++++++++++++++++-----
 8 files changed, 104 insertions(+), 36 deletions(-)

diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml
index 403b5f4c4..4106b4b6b 100644
--- a/chapter01/changelog.xml
+++ b/chapter01/changelog.xml
@@ -42,6 +42,22 @@
     <listitem>
       <para>2025-06-01</para>
       <itemizedlist>
+        <listitem>
+          <para>[bdubbs] - Update to systemd-257.6. Fixes
+          <ulink url='&lfs-ticket-root;5774'>#5774</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[bdubbs] - Update to setuptools-80.9.0. Fixes
+          <ulink url='&lfs-ticket-root;5728'>#5728</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[bdubbs] - Update to meson-1.8.1. Fixes
+          <ulink url='&lfs-ticket-root;5731'>#5731</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[bdubbs] - Update to automake-1.18. Fixes
+          <ulink url='&lfs-ticket-root;5734'>#5734</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[bdubbs] - Update build instructions to accomodate
           gcc-15 for bc, expect, ncurses, and gmp.</para>
diff --git a/chapter01/whatsnew.xml b/chapter01/whatsnew.xml
index f21ea40d4..e81c594f4 100644
--- a/chapter01/whatsnew.xml
+++ b/chapter01/whatsnew.xml
@@ -35,9 +35,9 @@
     <!--<listitem>
       <para>Autoconf-&autoconf-version;</para>
     </listitem>-->
-    <!--<listitem>
+    <listitem>
       <para>Automake-&automake-version;</para>
-    </listitem>-->
+    </listitem>
     <listitem>
       <para>Bash-&bash-version;</para>
     </listitem>
@@ -236,9 +236,9 @@
     <listitem revision="sysv">
       <para>Sysklogd-&sysklogd-version;</para>
     </listitem>
-    <!--<listitem>
+    <listitem>
       <para>Systemd-&systemd-version;</para>
-    </listitem>-->
+    </listitem>
     <!--<listitem revision="sysv">
       <para>SysVinit-&sysvinit-version;</para>
     </listitem>-->
@@ -296,6 +296,18 @@
     <listitem>
       <para>Packaging-&packaging-version;</para>
     </listitem>
+    <listitem>
+      <para>bash-5.3-rc1-cross_compile_fix-1.patch</para>
+    </listitem>
+    <listitem>
+      <para>coreutils-9.7-upstream_fix-1.patch</para>
+    </listitem>
+    <listitem>
+      <para>perl-5.40.2-upstream_fix-1.patch</para>
+    </listitem>
+    <listitem>
+      <para>Python-3.13.3-security_fixes-1.patch</para>
+    </listitem>
 
   </itemizedlist>
 
diff --git a/chapter03/patches.xml b/chapter03/patches.xml
index 907f6ed3e..435fa6acd 100644
--- a/chapter03/patches.xml
+++ b/chapter03/patches.xml
@@ -52,6 +52,14 @@
       </listitem>
     </varlistentry>
 
+    <varlistentry>
+      <term>Coreutils Upstream Fixe Patch - <token>&coreutils-upstream-patch-size;</token>:</term>
+      <listitem>
+        <para>Download: <ulink url="&patches-root;&coreutils-upstream-patch;"/></para>
+        <para>MD5 sum: <literal>&coreutils-upstream-patch-md5;</literal></para>
+      </listitem>
+    </varlistentry>
+
     <varlistentry>
       <term>Coreutils Internationalization Fixes Patch - <token>&coreutils-i18n-patch-size;</token>:</term>
       <listitem>
@@ -61,7 +69,7 @@
     </varlistentry>
 
     <varlistentry>
-      <term>Expect GCC14 Patch - <token>&expect-gcc15-patch-size;</token>:</term>
+      <term>Expect GCC15 Patch - <token>&expect-gcc15-patch-size;</token>:</term>
       <listitem>
         <para>Download: <ulink url="&patches-root;&expect-gcc15-patch;"/></para>
         <para>MD5 sum: <literal>&expect-gcc15-patch-md5;</literal></para>
@@ -118,24 +126,23 @@
       </listitem>
     </varlistentry>
 -->
-<!--
+
     <varlistentry>
-      <term>Pkgconf Upstream Fix Patch - <token>&pkgconf-upstream-fix-patch-size;</token>:</term>
+      <term>Perl Upstream Fix Patch - <token>&perl-upstream-fix-patch-size;</token>:</term>
       <listitem>
-        <para>Download: <ulink url="&patches-root;&pkgconf-upstream-fix-patch;"/></para>
-        <para>MD5 sum: <literal>&pkgconf-upstream-fix-patch-md5;</literal></para>
+        <para>Download: <ulink url="&patches-root;&perl-upstream-fix-patch;"/></para>
+        <para>MD5 sum: <literal>&perl-upstream-fix-patch-md5;</literal></para>
       </listitem>
     </varlistentry>
--->
-<!--
+
     <varlistentry>
-      <term>Readline Upstream Fix Patch - <token>&readline-fixes-patch-size;</token>:</term>
+      <term>Python Security Fix Patch - <token>&python-security-fixes-patch-size;</token>:</term>
       <listitem>
-        <para>Download: <ulink url="&patches-root;&readline-fixes-patch;"/></para>
-        <para>MD5 sum: <literal>&readline-fixes-patch-md5;</literal></para>
+        <para>Download: <ulink url="&patches-root;&python-security-fixes-patch;"/></para>
+        <para>MD5 sum: <literal>&python-security-fixes-patch-md5;</literal></para>
       </listitem>
     </varlistentry>
--->
+
     <varlistentry revision="sysv">
       <term>SysVinit Consolidated Patch - <token>&sysvinit-consolidated-patch-size;</token>:</term>
       <listitem>
diff --git a/chapter08/coreutils.xml b/chapter08/coreutils.xml
index 36d428981..abf5f7819 100644
--- a/chapter08/coreutils.xml
+++ b/chapter08/coreutils.xml
@@ -41,6 +41,10 @@
   <sect2 role="installation">
     <title>Installation of Coreutils</title>
 
+    <para>First apply a security patch identified upstream:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../&coreutils-upstream-patch;</userinput></screen>
+
     <para>POSIX requires that programs from Coreutils recognize character
     boundaries correctly even in multibyte locales. The following patch fixes
     this non-compliance and other internationalization-related bugs.</para>
diff --git a/chapter08/perl.xml b/chapter08/perl.xml
index b678f7f9d..0416aa85e 100644
--- a/chapter08/perl.xml
+++ b/chapter08/perl.xml
@@ -41,6 +41,10 @@
   <sect2 role="installation">
     <title>Installation of Perl</title>
 
+    <para>First, apply a security patch identified upstream:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../&perl-upstream-fix-patch;</userinput></screen>
+
     <para>This version of Perl builds the Compress::Raw::Zlib and
     Compress::Raw::BZip2 modules. By
     default Perl will use an internal copy of the sources for the build.
diff --git a/chapter08/python.xml b/chapter08/python.xml
index ebda61181..0cbce0b0c 100644
--- a/chapter08/python.xml
+++ b/chapter08/python.xml
@@ -43,12 +43,17 @@
   <sect2 role="installation">
     <title>Installation of Python 3</title>
 
+    <para>First, apply a security patch to the current package:</para>
+
+    <screen><userinput remap="pre">patch -Np1 -i ../&python-security-fixes-patch;</userinput></screen>
+    
     <para>Prepare Python for compilation:</para>
 
-<screen><userinput remap="configure">./configure --prefix=/usr        \
-            --enable-shared      \
-            --with-system-expat  \
-            --enable-optimizations</userinput></screen>
+<screen><userinput remap="configure">./configure --prefix=/usr          \
+            --enable-shared        \
+            --with-system-expat    \
+            --enable-optimizations \
+            --without-static-libpython</userinput></screen>
 
     <variablelist>
       <title>The meaning of the configure options:</title>
@@ -72,6 +77,14 @@
       </listitem>
     </varlistentry>
 
+    <varlistentry>
+      <term><parameter>--without-static-libpython</parameter></term>
+      <listitem>
+        <para>This switch prevents building a large, but unneeded, static
+        library.</para>
+      </listitem>
+    </varlistentry>
+
     </variablelist>
 
     <para>Compile the package:</para>
diff --git a/packages.ent b/packages.ent
index 159bbc313..405b0c373 100644
--- a/packages.ent
+++ b/packages.ent
@@ -38,11 +38,11 @@
 <!ENTITY autoconf-fin-sbu-tests "0.4">
 <!ENTITY autoconf-fin-sbu "less than 0.1 SBU (about &autoconf-fin-sbu-tests; SBU with tests)">
 
-<!ENTITY automake-version "1.17">
-<!ENTITY am-minor-version "1.17">
+<!ENTITY automake-version "1.18">
+<!ENTITY am-minor-version "1.18">
 <!ENTITY automake-size "1,614 KB">
 <!ENTITY automake-url "&gnu;automake/automake-&automake-version;.tar.xz">
-<!ENTITY automake-md5 "7ab3a02318fee6f5bd42adfc369abf10">
+<!ENTITY automake-md5 "1320dd6a6aae0d97668daa089086c083">
 <!ENTITY automake-home "&gnu-software;automake/">
 <!ENTITY automake-fin-du "121 MB">
 <!ENTITY automake-fin-sbu "less than 0.1 SBU (about 1.1 SBU with tests)">
@@ -495,10 +495,10 @@
 <!ENTITY markupsafe-fin-du "500 KB">
 <!ENTITY markupsafe-fin-sbu "less than 0.1 SBU">
 
-<!ENTITY meson-version "1.8.0">
-<!ENTITY meson-size "2,281 KB">
+<!ENTITY meson-version "1.8.1">
+<!ENTITY meson-size "2,278 KB">
 <!ENTITY meson-url "&github;/mesonbuild/meson/releases/download/&meson-version;/meson-&meson-version;.tar.gz">
-<!ENTITY meson-md5 "74664d20851d29bc3e491d502d66e1f7">
+<!ENTITY meson-md5 "5cfd7e2b2246d874746d68ffd43a0774">
 <!ENTITY meson-home "https://mesonbuild.com">
 <!ENTITY meson-fin-du "44 MB">
 <!ENTITY meson-fin-sbu "less than 0.1 SBU">
@@ -638,10 +638,10 @@
 <!ENTITY sed-fin-du "30 MB">
 <!ENTITY sed-fin-sbu "0.3 SBU">
 
-<!ENTITY setuptools-version "80.7.1">
-<!ENTITY setuptools-size "1,289 KB">
+<!ENTITY setuptools-version "80.9.0">
+<!ENTITY setuptools-size "1,290 KB">
 <!ENTITY setuptools-url "&pypi-src;/s/setuptools/setuptools-&setuptools-version;.tar.gz">
-<!ENTITY setuptools-md5 "dc25a6f2961f8615199e9a63e6c4b431">
+<!ENTITY setuptools-md5 "82e1d67883b713f9493659b50d13b436">
 <!ENTITY setuptools-home "&pypi-home;/setuptools/">
 <!ENTITY setuptools-fin-du "26 MB">
 <!ENTITY setuptools-fin-sbu "less than 0.1 SBU">
@@ -662,15 +662,15 @@
 <!ENTITY sysklogd-fin-du "4.1 MB">
 <!ENTITY sysklogd-fin-sbu "less than 0.1 SBU">
 
-<!ENTITY systemd-version  "257.3">
+<!ENTITY systemd-version  "257.6">
 <!--<!ENTITY systemd-stable   "6b4878d">-->
 <!-- The above entity is used whenever we move to a stable backport branch. 
      In the event of a critical problem or kernel change that is incompatible, 
      we will switch to the backport branch until the next stable release. -->
-<!ENTITY systemd-size     "15,847 KB">
+<!ENTITY systemd-size     "15,940 KB">
 <!ENTITY systemd-url      "&github;/systemd/systemd/archive/v&systemd-version;/systemd-&systemd-version;.tar.gz">
 <!--<!ENTITY systemd-url      "&anduin-sources;/systemd-&systemd-version;-&systemd-stable;.tar.xz">-->
-<!ENTITY systemd-md5      "8e4fc90c7aead651fa5c50bd1b34abc2">
+<!ENTITY systemd-md5      "458b07e140cd65d25baf7752398c5d13">
 <!ENTITY systemd-home     "https://www.freedesktop.org/wiki/Software/systemd/">
 <!ENTITY systemd-man-version "257.3">
 <!ENTITY systemd-man-size "733 KB">
diff --git a/patches.ent b/patches.ent
index d800a74d6..dc666134a 100644
--- a/patches.ent
+++ b/patches.ent
@@ -11,6 +11,7 @@
 <!ENTITY binutils-upstream-patch-md5 "eddd9860af589ec328541a9ec5e5928e">
 <!ENTITY binutils-upstream-patch-size "18 KB">
 -->
+
 <!ENTITY bzip2-docs-patch "bzip2-&bzip2-version;-install_docs-1.patch">
 <!ENTITY bzip2-docs-patch-md5 "6a5ac7e89b791aae556de0f745916f7f">
 <!ENTITY bzip2-docs-patch-size "1.6 KB">
@@ -19,6 +20,10 @@
 <!ENTITY coreutils-i18n-patch-md5 "33ebfad32b2dfb8417c3335c08671206">
 <!ENTITY coreutils-i18n-patch-size "159 KB">
 
+<!ENTITY coreutils-upstream-patch "coreutils-&coreutils-version;-upstream_fix-1.patch">
+<!ENTITY coreutils-upstream-patch-md5 "96382a5aa85d6651a74f94ffb61785d9">
+<!ENTITY coreutils-upstream-patch-size "4.1 KB">
+
 <!ENTITY expect-gcc15-patch "expect-&expect-version;-gcc15-1.patch">
 <!ENTITY expect-gcc15-patch-md5 "0ca4d6bb8d572fbcdb13cb36cd34833e">
 <!ENTITY expect-gcc15-patch-size "12 KB">
@@ -26,22 +31,29 @@
 <!ENTITY glibc-fhs-patch "glibc-&glibc-version;-fhs-1.patch">
 <!ENTITY glibc-fhs-patch-md5 "9a5997c3452909b1769918c759eff8a2">
 <!ENTITY glibc-fhs-patch-size "2.8 KB">
-<!--
-<!ENTITY glibc-upstream-patch "glibc-&glibc-version;-upstream_fix-2.patch">
-<!ENTITY glibc-upstream-patch-md5 "e9f8f23746755bf880772cfa59c1896c">
-<!ENTITY glibc-upstream-patch-size "8.0 KB">
--->
+
 <!ENTITY kbd-backspace-patch "kbd-&kbd-version;-backspace-1.patch">
 <!ENTITY kbd-backspace-patch-md5 "f75cca16a38da6caa7d52151f7136895">
 <!ENTITY kbd-backspace-patch-size "12 KB">
+
+<!ENTITY perl-upstream-fix-patch "perl-&perl-version;-upstream_fix-1.patch">
+<!ENTITY perl-upstream-fix-patch-md5 "1983b48fee837a98db47fb5dba934744">
+<!ENTITY perl-upstream-fix-patch-size "13 KB">
+
+<!ENTITY python-security-fixes-patch "Python-&python-version;-security_fixes-1.patch">
+<!ENTITY python-security-fixes-patch-md5 "55f88f3bfe711911425c3172b9024938">
+<!ENTITY python-security-fixes-patch-size "24 KB">
+
 <!--
 <!ENTITY readline-fixes-patch "readline-&readline-version;-upstream_fixes-3.patch">
 <!ENTITY readline-fixes-patch-md5 "9ed497b6cb8adcb8dbda9dee9ebce791">
 <!ENTITY readline-fixes-patch-size "13 KB">
 -->
+
 <!ENTITY sysvinit-consolidated-patch "sysvinit-&sysvinit-version;-consolidated-1.patch">
 <!ENTITY sysvinit-consolidated-patch-md5 "3af8fd8e13cad481eeeaa48be4247445">
 <!ENTITY sysvinit-consolidated-patch-size "2.5 KB">
+
 <!--
 <!ENTITY systemd-upstream-patch "systemd-&systemd-version;-upstream_fixes-1.patch">
 <!ENTITY systemd-upstream-patch-md5 "8d9c1014445c463cf7c24c162b1e0686">