Read the security advisories before downloading packages to figure out if a newer version of any package should be used to avoid security vulnerabilities.
The upstream sources may remove old releases, especially when those releases contain a security vulnerability. If one URL below is not reachable, you should read the security advisories first to figure out if a newer version (with the vulnerability fixed) should be used. If not, try to download the removed package from a mirror. Although it's possible to download an old release from a mirror even if this release has been removed because of a vulnerability, it's not a good idea to use a release known to be vulnerable when building your system.
Download or otherwise obtain the following packages:
Home page: https://savannah.nongnu.org/projects/acl
Download: https://download.savannah.gnu.org/releases/acl/acl-2.4.0.tar.xz
MD5 sum: e289f370161698a96f50b2a3fdadf411
Home page: https://savannah.nongnu.org/projects/attr
Download: https://download.savannah.gnu.org/releases/attr/attr-2.6.0.tar.gz
MD5 sum: 910a09c3ae0a211569d180586371cf7e
Home page: https://www.gnu.org/software/autoconf/
Download: https://ftpmirror.gnu.org/autoconf/autoconf-2.73.tar.xz
MD5 sum: 9cbad9a116ef845bafeed8e7bc771bf4
Home page: https://www.gnu.org/software/automake/
Download: https://ftpmirror.gnu.org/automake/automake-1.19.tar.xz
MD5 sum: da9b5c852b94089c7b7b16071ce8803c
Home page: https://www.gnu.org/software/bash/
Download: https://ftpmirror.gnu.org/bash/bash-5.3.tar.gz
MD5 sum: 977c8c0c5ae6309191e7768e28ebc951
Home page: https://github.com/gavinhoward
Download: https://github.com/gavinhoward/bc/releases/download/7.0.3/bc-7.0.3.tar.xz
MD5 sum: ad4db5a0eb4fdbb3f6813be4b6b3da74
Home page: https://www.gnu.org/software/binutils/
Download: https://sourceware.org/pub/binutils/releases/binutils-2.47.tar.xz
MD5 sum: d772acfbd55a81644e9fe7b8189cd2a5
Home page: https://www.gnu.org/software/bison/
Download: https://ftpmirror.gnu.org/bison/bison-3.8.2.tar.xz
MD5 sum: c28f119f405a2304ff0a7ccdcc629713
Download: https://www.sourceware.org/pub/bzip2/bzip2-1.0.8.tar.gz
MD5 sum: 67e051268d0c475ea773822f7500d0e5
Home page: https://www.gnu.org/software/coreutils/
Download: https://ftpmirror.gnu.org/coreutils/coreutils-9.12.tar.xz
MD5 sum: d7451ac748c319e6e1bc30e9ec63956c
Home page: https://www.freedesktop.org/wiki/Software/dbus
Download: https://dbus.freedesktop.org/releases/dbus/dbus-1.16.2.tar.xz
MD5 sum: 97832e6f0a260936d28536e5349c22e5
Home page: https://www.gnu.org/software/dejagnu/
Download: https://ftpmirror.gnu.org/dejagnu/dejagnu-1.6.3.tar.gz
MD5 sum: 68c5208c58236eba447d7d6d1326b821
Home page: https://www.gnu.org/software/diffutils/
Download: https://ftpmirror.gnu.org/diffutils/diffutils-3.12.tar.xz
MD5 sum: d1b18b20868fb561f77861cd90b05de4
Home page: https://e2fsprogs.sourceforge.net/
Download: https://downloads.sourceforge.net/project/e2fsprogs/e2fsprogs/v1.47.4/e2fsprogs-1.47.4.tar.gz
MD5 sum: 733a93bc688314834ff2d10530ff4dc4
Home page: https://sourceware.org/elfutils/
Download: https://sourceware.org/ftp/elfutils/0.197/elfutils-0.197.tar.bz2
MD5 sum: 072992c8388b958dc006c6cfb74a0100
Home page: https://libexpat.github.io/
Download: https://github.com/libexpat/libexpat/releases/download/R_2_9_0/expat-2.9.0.tar.xz
MD5 sum: fa5ea2bb996c624133368a87206d72af
Home page: https://www.nist.gov/services-resources/software/expect
Download: https://prdownloads.sourceforge.net/expect/expect5.45.4.tar.gz
MD5 sum: 00fce8de158422f5ccd2666512329bd2
Home page: https://www.darwinsys.com/file/
Download: https://astron.com/pub/file/file-5.48.tar.gz
MD5 sum: 423686e97f731d8c24e9cd1a22b03dec
Home page: https://www.gnu.org/software/findutils/
Download: https://ftpmirror.gnu.org/findutils/findutils-4.11.0.tar.xz
MD5 sum: 512c6875ed84034dca240c4bc9380b96
Home page: https://github.com/westes/flex
Download: https://github.com/westes/flex/releases/download/v2.6.4/flex-2.6.4.tar.gz
MD5 sum: 2882e3179748cc9f9c23ec593d6adc8d
Home page: https://pypi.org/project/flit-core/
Download: https://pypi.org/packages/source/f/flit-core/flit_core-4.1.0.tar.gz
MD5 sum: 6aed048324976ab2178d4d57a7933763
Home page: https://www.gnu.org/software/gawk/
Download: https://ftpmirror.gnu.org/gawk/gawk-5.4.1.tar.xz
MD5 sum: d379c2110e7a3e15347dd5559a41ad64
Home page: https://gcc.gnu.org/
Download: https://ftpmirror.gnu.org/gcc/gcc-16.2.0/gcc-16.2.0.tar.xz
MD5 sum: 19b777fb19ea4982731392481306f0d3
Home page: https://www.gnu.org/software/gdbm/
Download: https://ftpmirror.gnu.org/gdbm/gdbm-1.26.tar.gz
MD5 sum: aaa600665bc89e2febb3c7bd90679115
Home page: https://www.gnu.org/software/gettext/
Download: https://ftpmirror.gnu.org/gettext/gettext-1.0.tar.xz
MD5 sum: dc8b2911535929cec1e263706b0a13a1
Home page: https://www.gnu.org/software/libc/
Download: https://ftpmirror.gnu.org/glibc/glibc-2.44.tar.xz
MD5 sum: 7677da43ef759c68e005f5d4c37986a6
The Glibc developers maintain a Git branch containing patches considered worthy for Glibc-2.44 but unfortunately developed after Glibc-2.44 release. The LFS editors will add a glibc upstream fixes patch (or update an existing one) for the LFS development book to follow that branch if an important fix is added (for example, a security fix) and maybe issue an errata (or security advisory) if the fix is required for the recent stable LFS release, but no actions will be taken for patches with less importance. You may review the patches yourself and incorporate some patches if you consider them important.
Home page: https://www.gnu.org/software/gmp/
Download: https://ftpmirror.gnu.org/gmp/gmp-6.3.0.tar.xz
MD5 sum: 956dc04e864001a9c22429f761f2c283
Home page: https://www.gnu.org/software/gperf/
Download: https://ftpmirror.gnu.org/gperf/gperf-3.3.tar.gz
MD5 sum: 31753b021ea78a21f154bf9eecb8b079
Home page: https://www.gnu.org/software/grep/
Download: https://ftpmirror.gnu.org/grep/grep-3.12.tar.xz
MD5 sum: 5d9301ed9d209c4a88c8d3a6fd08b9ac
Home page: https://www.gnu.org/software/groff/
Download: https://ftpmirror.gnu.org/groff/groff-1.24.2.tar.gz
MD5 sum: 4568a9c35000784246cfebff8e93121a
Home page: https://www.gnu.org/software/grub/
MD5 sum: 1c611aa4712ce1ea447b9cbdfdb072a4
Home page: https://www.gnu.org/software/gzip/
Download: https://ftpmirror.gnu.org/gzip/gzip-1.15.tar.xz
MD5 sum: 8b5711442bf246612d0c51de0bf79964
Home page: https://www.iana.org/protocols
Download: https://github.com/Mic92/iana-etc/releases/download/20261015/iana-etc-20261015.tar.gz
MD5 sum: ce2bd3902a91499ab38d4dda06be5be7
Home page: https://www.gnu.org/software/inetutils/
Download: https://ftpmirror.gnu.org/inetutils/inetutils-2.8.tar.gz
MD5 sum: f0f9ad13045a67da9c882148f9efae6b
Home page: https://www.kernel.org/pub/linux/utils/net/iproute2/
Download: https://www.kernel.org/pub/linux/utils/net/iproute2/iproute2-7.3.0.tar.xz
MD5 sum: b51e7e3eaf2cee927417192045f3466d
Home page: https://jinja.palletsprojects.com/en/3.1.x/
Download: https://pypi.org/packages/source/J/Jinja2/jinja2-3.1.6.tar.gz
MD5 sum: 66d4c25ff43d1deaf9637ccda523dec8
Home page: https://kbd-project.org/
Download: https://www.kernel.org/pub/linux/utils/kbd/kbd-2.10.0.tar.xz
MD5 sum: 77ff950dfa4c34fdf41125547bfa831a
Home page: https://github.com/kmod-project/kmod
Download: https://www.kernel.org/pub/linux/utils/kernel/kmod/kmod-34.2.tar.xz
MD5 sum: 36f2cc483745e81ede3406fa55e1065a
Home page: https://www.greenwoodsoftware.com/less/
Download: https://www.greenwoodsoftware.com/less/less-710.tar.gz
MD5 sum: c5b0ed0d7cebd3869feeae499c66a97b
Home page: https://sites.google.com/site/fullycapable/
Download: https://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/libcap-2.78.tar.xz
MD5 sum: 0ff11419aa4813c0a0f84fe67bf3b39e
Home page: https://sourceware.org/libffi/
Download: https://github.com/libffi/libffi/releases/download/v3.8.0/libffi-3.8.0.tar.gz
MD5 sum: 96fe46f2a7bb82559b35a268a2c000ba
Home page: https://libpipeline.nongnu.org/
Download: https://download.savannah.gnu.org/releases/libpipeline/libpipeline-1.5.8.tar.gz
MD5 sum: 17ac6969b2015386bcb5d278a08a40b5
Home page: https://www.gnu.org/software/libtool/
Download: https://ftpmirror.gnu.org/libtool/libtool-2.6.2.tar.xz
MD5 sum: 87743862e6cabfb9e76651bc64e31e5c
Home page: https://github.com/besser82/libxcrypt/
Download: https://github.com/besser82/libxcrypt/releases/download/v4.5.2/libxcrypt-4.5.2.tar.xz
MD5 sum: 25e888919ddcd153a07daa95224fa436
Home page: https://www.kernel.org/
Download: https://www.kernel.org/pub/linux/kernel/v7.x/linux-7.3.tar.xz
MD5 sum: b38587333374ecce1141b9b5886c4fcf
The Linux kernel is updated quite frequently, many times due to discoveries of security vulnerabilities. The latest available stable kernel version may be used, unless the errata page says otherwise.
For users with limited speed or expensive bandwidth who wish to update the Linux kernel, a baseline version of the package and patches can be downloaded separately. This may save some time or cost for a subsequent patch level upgrade within a minor release.
As an example, for linux-7.3, the following could be downloaded:
Then in Section 5.4,
“Linux-7.3 API Headers” and Section 10.3, “Linux-7.3”
unpack the kernel, change to the package directory and then
apply the patch with xzcat
../patch-7.3.xz | patch -Np1.
At this point, if a newer point version of the kernel is needed, then only the newer patch is needed. However, if a new minor version is desired, then both full minor version and any desired patch will both need to be downloaded.
Home page: https://lz4.org/
Download: https://github.com/lz4/lz4/releases/download/v1.10.0/lz4-1.10.0.tar.gz
MD5 sum: dead9f5f1966d9ae56e1e32761e4e675
Home page: https://www.gnu.org/software/m4/
Download: https://ftpmirror.gnu.org/m4/m4-1.4.21.tar.xz
MD5 sum: 8051eef7239b2f187791f2ab0034d6b7
Home page: https://www.gnu.org/software/make/
Download: https://ftpmirror.gnu.org/make/make-4.4.1.tar.gz
MD5 sum: c8469a3713cbbe04d955d4ae4be23eeb
Home page: https://www.nongnu.org/man-db/
Download: https://download.savannah.gnu.org/releases/man-db/man-db-2.13.1.tar.xz
MD5 sum: b6335533cbeac3b24cd7be31fdee8c83
Home page: https://www.kernel.org/doc/man-pages/
Download: https://www.kernel.org/pub/linux/docs/man-pages/man-pages-6.20.tar.xz
MD5 sum: a9a0c253b048d38dfc0c994f1dff993b
Home page: https://palletsprojects.com/p/markupsafe/
Download: https://pypi.org/packages/source/M/MarkupSafe/markupsafe-3.0.4.tar.gz
MD5 sum: 7c70b0284d3733795287d8d67e7164e0
Home page: https://mesonbuild.com
Download: https://github.com/mesonbuild/meson/releases/download/1.12.1/meson-1.12.1.tar.gz
MD5 sum: c6eb71722ba220419cbebab8b1bd895f
Home page: https://www.multiprecision.org/
Download: https://ftpmirror.gnu.org/mpc/mpc-1.4.1.tar.xz
MD5 sum: 40c5fba305125279ea46041160e81daf
Home page: https://www.bytereef.org/mpdecimal/
Download: https://www.bytereef.org/software/mpdecimal/releases/mpdecimal-4.0.1.tar.gz
MD5 sum: 3d4412579b1edc1047efab151889cca9
Home page: https://www.mpfr.org/
Download: https://ftpmirror.gnu.org/mpfr/mpfr-4.2.2.tar.xz
MD5 sum: 7c32c39b8b6e3ae85f25156228156061
Home page: https://www.gnu.org/software/ncurses/
Download: https://invisible-mirror.net/archives/ncurses/ncurses-6.6.tar.gz
MD5 sum: dd45bf6854430af403452a7a6a40652c
Home page: https://ninja-build.org/
Download: https://github.com/ninja-build/ninja/archive/v1.13.2/ninja-1.13.2.tar.gz
MD5 sum: 76c00637fde44909cd7d56f8d73f2042
Home page: https://www.openssl-library.org/
Download: https://github.com/openssl/openssl/releases/download/openssl-4.1.0/openssl-4.1.0.tar.gz
MD5 sum: 3dd690cc5ed65605cf4d125c1176439c
Home page: https://pypi.org/project/packaging/
Download: https://files.pythonhosted.org/packages/source/p/packaging/packaging-26.3.tar.gz
MD5 sum: c6809ec56986682ceffe573b8778a1ce
Home page: https://savannah.gnu.org/projects/patch/
Download: https://ftpmirror.gnu.org/patch/patch-2.8.tar.xz
MD5 sum: 149327a021d41c8f88d034eab41c039f
Home page: https://github.com/PCRE2Project/pcre2/
Download: https://github.com/PCRE2Project/pcre2/releases/download/pcre2-10.49/pcre2-10.49.tar.bz2
MD5 sum: 7b8509249cbd23ea76b6437bcce9be94
Home page: https://www.perl.org/
Download: https://www.cpan.org/src/5.0/perl-5.44.0.tar.xz
MD5 sum: 55761cf1543af326492fd194647796d1
Home page: https://github.com/pkgconf/pkgconf
Download: https://distfiles.ariadne.space/pkgconf/pkgconf-3.0.10.tar.xz
MD5 sum: a825346f51f1ca2f09dddf891e6d1e3c
Home page: https://gitlab.com/procps-ng/procps/
Download: https://sourceforge.net/projects/procps-ng/files/Production/procps-ng-4.0.7.tar.xz
MD5 sum: d47bdda51c4bd595a1ab21b8e538bcb3
Home page: https://gitlab.com/psmisc/psmisc
Download: https://sourceforge.net/projects/psmisc/files/psmisc/psmisc-23.7.tar.xz
MD5 sum: 53eae841735189a896d614cba440eb10
Home page: https://www.python.org/
Download: https://www.python.org/ftp/python/3.15.1/Python-3.15.1.tar.xz
MD5 sum: a8c1eb2f694453eaed08c02902a186a6
Download: https://www.python.org/ftp/python/doc/3.15.1/python-3.15.1-docs-html.tar.bz2
MD5 sum: 53713065578bf7a971d83d1b7bcfc149
Home page: https://tiswww.case.edu/php/chet/readline/rltop.html
Download: https://ftpmirror.gnu.org/readline/readline-8.3.tar.gz
MD5 sum: 25a73bfb2a3ad7146c5e9d4408d9f6cd
Home page: https://www.gnu.org/software/sed/
Download: https://ftpmirror.gnu.org/sed/sed-4.10.tar.xz
MD5 sum: c70dc5372db95c816442ffedf77a0d0f
Home page: https://pypi.org/project/setuptools/
Download: https://pypi.org/packages/source/s/setuptools/setuptools-84.2.1.tar.gz
MD5 sum: 251cbfc8f83414155e0e595cc4cffdd2
Home page: https://github.com/shadow-maint/shadow/
Download: https://github.com/shadow-maint/shadow/releases/download/4.20.3/shadow-4.20.3.tar.xz
MD5 sum: dd905c09b339e825b21512df7ba49063
Home page: https://sqlite.org
Download: https://sqlite.org/2026/sqlite-autoconf-3540100.tar.gz
MD5 sum: 5578c8ff43f5eb1ec671f0a2766b53c9
Home page: https://sqlite.org
Download: https://sqlite.org/2026/sqlite-doc-3540100.zip
MD5 sum: f6dfc9d04e7c837ab03a5bb28b3cce9b
Home page: https://systemd.io
Download: https://github.com/systemd/systemd/archive/v262.1/systemd-262.1.tar.gz
MD5 sum: 5aff3c8c8a663d4cd99d1cc89530fd09
Home page: https://systemd.io
Download: https://anduin.linuxfromscratch.org/LFS/systemd-man-pages-262.1.tar.xz
MD5 sum: 20c428161a5783fdc9f79a1bbb95563c
The Linux From Scratch team generates its own tarball of the man pages using the systemd source. This is done in order to avoid unnecessary dependencies.
Home page: https://www.gnu.org/software/tar/
Download: https://ftpmirror.gnu.org/tar/tar-1.35.tar.xz
MD5 sum: a2d8042658cfd8ea939e6d911eaf4152
Home page: https://tcl.sourceforge.net/
Download: https://downloads.sourceforge.net/tcl/tcl8.6.18-src.tar.gz
MD5 sum: acfe0c9f7d0c626ecf026e834a888da6
Download: https://downloads.sourceforge.net/tcl/tcl8.6.18-html.tar.gz
MD5 sum: 54d1ff0f5eee4e81e5cdaa4baa343397
Home page: https://www.gnu.org/software/texinfo/
Download: https://ftpmirror.gnu.org/texinfo/texinfo-7.3.tar.xz
MD5 sum: 915a09fcdfc2bf0f5ecf9e556d5698ff
Home page: https://www.iana.org/time-zones
Download: https://www.iana.org/time-zones/repository/releases/tzdata2026e.tar.gz
MD5 sum: e1bb044ee184daee12f3e83ca16def7f
Home page: https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/
Download: https://www.kernel.org/pub/linux/utils/util-linux/v2.42/util-linux-2.42.4.tar.xz
MD5 sum: 0d25a2070c56b1f9f0b5a0ac6b29135a
Home page: https://www.vim.org
Download: https://github.com/vim/vim/archive/v9.2.1225/vim-9.2.1225.tar.gz
MD5 sum: a3594aae508c628c50bf3c71af37813b
The version of vim changes daily. To get the latest version, go to https://github.com/vim/vim/tags.
Home page: https://pypi.org/project/wheel/
Download: https://pypi.org/packages/source/w/wheel/wheel-0.48.0.tar.gz
MD5 sum: f668e4885de814378b332eceea04a8a0
Home page: https://tukaani.org/xz
Download: https://github.com//tukaani-project/xz/releases/download/v5.8.4/xz-5.8.4.tar.xz
MD5 sum: 8b2f092ad33e560bc04ffdbe3101daa7
Home page: https://zlib.net/
Download: https://zlib.net/fossils/zlib-1.3.2.tar.gz
MD5 sum: a1e6c958597af3c67d162995a342138a
Home page: https://facebook.github.io/zstd/
Download: https://github.com/facebook/zstd/releases/download/v1.5.7/zstd-1.5.7.tar.gz
MD5 sum: 780fc1896922b1bc52a4e90980cdda48
Total size of these packages: about 653 MB