Index: general.ent
===================================================================
--- general.ent	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ general.ent	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -1,5 +1,5 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "01">                   <!-- Always 2 digits -->
+<!ENTITY day          "02">                   <!-- Always 2 digits -->
 <!ENTITY month        "01">                   <!-- Always 2 digits -->
 <!ENTITY year         "2019">
@@ -7,5 +7,5 @@
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "January 1st, &year;">
+<!ENTITY releasedate  "January 2nd, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
Index: general/genutils/gtk-doc.xml
===================================================================
--- general/genutils/gtk-doc.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ general/genutils/gtk-doc.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -107,5 +107,6 @@
 make</userinput></screen>
 
-    <para>To test the results, issue: <command>make check</command>.</para>
+    <para>To test the results, issue: <command>make check</command>. On some systems, the tests
+    may either hang indefinitely or fail.</para> 
 
     <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
Index: general/sysutils/bubblewrap.xml
===================================================================
--- general/sysutils/bubblewrap.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
+++ general/sysutils/bubblewrap.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -0,0 +1,148 @@
+<?xml version="1.0" encoding="ISO-8859-1"?>
+<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
+   "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+  <!ENTITY % general-entities SYSTEM "../../general.ent">
+  %general-entities;
+
+  <!ENTITY bubblewrap-download-http "https://github.com/projectatomic/bubblewrap/releases/download/v&bubblewrap-version;/bubblewrap-&bubblewrap-version;.tar.xz">
+  <!ENTITY bubblewrap-download-ftp  " ">
+  <!ENTITY bubblewrap-md5sum        "c34034985e80bdea39aaaaa4bcb92c64">
+  <!ENTITY bubblewrap-size          "208 KB">
+  <!ENTITY bubblewrap-buildsize     "2.0 MB">
+  <!ENTITY bubblewrap-time          "Less than 0.1 SBU">
+]>
+
+<sect1 id="bubblewrap" xreflabel="bubblewrap-&bubblewrap-version;">
+  <?dbhtml filename="bubblewrap.html"?>
+
+  <sect1info>
+    <!-- this part gets updated when you commit, IFF you set the properties:
+      first, svn add path/to/thisfile.xml and then
+      svn propset svn:mime-type text/plain path/to/thisfile.xml and
+      svn propset svn:keywords "Date LastChangedBy" path/to/thisfile.xml -->
+    <othername>$LastChangedBy$</othername>
+    <date>$Date$</date>
+  </sect1info>
+
+  <title>Bubblewrap-&bubblewrap-version;</title>
+
+  <indexterm zone="bubblewrap">
+    <primary sortas="a-bubblewrap">bubblewrap</primary>
+  </indexterm>
+
+  <sect2 role="package">
+    <title>Introduction to Bubblewrap</title>
+
+    <para>
+      The <application>Bubblewrap</application> package contains a program used to create filesystem namespaces, or
+      sandboxes, for processes to run inside so that they are sepearated from the rest of the files on a system.
+      This is useful for preventing programs like thumbnailers from being compromised and causing damage to other
+      areas on the system. Currently, this package is only a dependency for <xref linkend="gnome-desktop"/>.
+    </para>
+
+    &lfs83_checked;
+
+    <bridgehead renderas="sect3">Package Information</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Download (HTTP): <ulink url="&bubblewrap-download-http;"/>
+        </para>
+      </listitem>
+      <listitem>
+        <para>
+          Download (FTP): <ulink url="&bubblewrap-download-ftp;"/>
+        </para>
+      </listitem>
+      <listitem>
+        <para>
+          Download MD5 sum: &bubblewrap-md5sum;
+        </para>
+      </listitem>
+      <listitem>
+        <para>
+          Download size: &bubblewrap-size;
+        </para>
+      </listitem>
+      <listitem>
+        <para>
+          Estimated disk space required: &bubblewrap-buildsize;
+        </para>
+      </listitem>
+      <listitem>
+        <para>
+          Estimated build time: &bubblewrap-time;
+        </para>
+      </listitem>
+    </itemizedlist>
+
+    <para condition="html" role="usernotes">
+      User Notes: <ulink url="&blfs-wiki;/bubblewrap"/>
+    </para>
+  </sect2>
+
+  <!-- NOTE: There is a possiblity of kernel configuration being required (see Xi's comment in #11090).
+  So far, I have not observed this, but that doesn't mean that it still might not be needed in practice. -->
+
+  <sect2 role="installation">
+    <title>Installation of Bubblewrap</title>
+
+    <para>
+      Install <application>Bubblewrap</application> by running the following
+      commands:
+    </para>
+
+<screen><userinput>./configure --prefix=/usr &amp;&amp;
+make</userinput></screen>
+
+    <para>
+      This package does not come with a test suite.
+    </para>
+
+    <para>
+      Now, as the <systemitem class="username">root</systemitem> user:
+    </para>
+
+<screen role="root"><userinput>make install</userinput></screen>
+  </sect2>
+
+  <sect2 role="content">
+    <title>Contents</title>
+
+    <segmentedlist>
+      <segtitle>Installed Program</segtitle>
+      <segtitle>Installed Libraries</segtitle>
+      <segtitle>Installed Directories</segtitle>
+
+      <seglistitem>
+        <seg>
+          bwrap
+        </seg>
+        <seg>
+          None
+        </seg>
+        <seg>
+          None
+        </seg>
+      </seglistitem>
+    </segmentedlist>
+
+    <variablelist>
+      <bridgehead renderas="sect3">Short Descriptions</bridgehead>
+      <?dbfo list-presentation="list"?>
+      <?dbhtml list-presentation="table"?>
+
+      <varlistentry id="bwrap">
+        <term><command>bwrap</command></term>
+        <listitem>
+          <para>
+            generates a sandbox for a program to run in.
+          </para>
+          <indexterm zone="bubblewrap bwrap">
+            <primary sortas="b-bwrap">bwrap</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
+    </variablelist>
+  </sect2>
+</sect1>
Index: general/sysutils/pciutils.xml
===================================================================
--- general/sysutils/pciutils.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ general/sysutils/pciutils.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -163,5 +163,5 @@
 /usr/sbin/update-pciids</literal>
 EOF
-chmod 754 /etc/cron.weekly/update-pciids</userinput></screen>
+chmod 754 /etc/cron.weekly/update-pciids.sh</userinput></screen>
 
 <screen role="root" revision="systemd"><userinput>cat &gt; /lib/systemd/system/update-pciids.service &lt;&lt; "EOF" &amp;&amp;
Index: general/sysutils/sysutils.xml
===================================================================
--- general/sysutils/sysutils.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ general/sysutils/sysutils.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -27,4 +27,5 @@
   <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="autofs.xml"/>
   <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="bluez.xml"/>
+  <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="bubblewrap.xml"/>
   <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="colord.xml"/>
   <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="cpio.xml"/>
Index: general/sysutils/usbutils.xml
===================================================================
--- general/sysutils/usbutils.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ general/sysutils/usbutils.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -168,5 +168,5 @@
 /usr/bin/wget http://www.linux-usb.org/usb.ids -O /usr/share/hwdata/usb.ids</literal>
 EOF
-chmod 754 /etc/cron.weekly/update-usbids</userinput></screen>
+chmod 754 /etc/cron.weekly/update-usbids.sh</userinput></screen>
 
 <screen role="root" revision="systemd"><userinput>cat &gt; /lib/systemd/system/update-usbids.service &lt;&lt; "EOF" &amp;&amp;
Index: gnome.ent
===================================================================
--- gnome.ent	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ gnome.ent	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -18,14 +18,14 @@
 <!ENTITY gcr-version                       "3.28.0">
 <!ENTITY gsettings-desktop-schemas-version "3.28.1">
-<!ENTITY libsecret-version                 "0.18.6">
+<!ENTITY libsecret-version                 "0.18.7">
 <!ENTITY rest-version                      "0.8.1">
 <!ENTITY totem-pl-parser-version           "3.26.1">
-<!ENTITY vte-version                       "0.54.2">
+<!ENTITY vte-version                       "0.54.3">
 <!ENTITY yelp-xsl-version                  "3.30.1">
 <!ENTITY GConf-version                     "3.2.6">
 <!ENTITY geocode-glib-version              "3.26.0">
-<!ENTITY gjs-version                       "1.54.1">
+<!ENTITY gjs-version                       "1.54.3">
 <!ENTITY gnome-autoar-version              "0.2.3">
-<!ENTITY gnome-desktop-version             "3.28.2">
+<!ENTITY gnome-desktop-version             "3.30.2">
 <!ENTITY gnome-menus-version               "3.13.3">
 <!ENTITY gnome-online-accounts-version     "3.28.0">
Index: gnome/platform/gjs.xml
===================================================================
--- gnome/platform/gjs.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ gnome/platform/gjs.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -7,8 +7,7 @@
   <!ENTITY gjs-download-http "&gnome-download-http;/gjs/1.54/gjs-&gjs-version;.tar.xz">
   <!ENTITY gjs-download-ftp  "&gnome-download-ftp;/gjs/1.54/gjs-&gjs-version;.tar.xz">
-  <!ENTITY gjs-md5sum        "54530c44fef502ac5a0fbc5772d77ace">
+  <!ENTITY gjs-md5sum        "387dd08d40d4f1f1ffec9546b52e7619">
   <!ENTITY gjs-size          "636 KB">
   <!ENTITY gjs-buildsize     "78 MB (with tests)">
-  <!-- 100 MB less - seems fishy, but seems to work. -->
   <!ENTITY gjs-time          "1.0 SBU (with tests)">
 ]>
@@ -117,4 +116,5 @@
       use Unicode are known to fail, as C.UTF-8 isn't defined as a locale
       in our environment.
+      <!-- I sent a mail to the lists regarding this on 2019-01-01 -renodr -->
     </para>
 
Index: gnome/platform/gnome-desktop.xml
===================================================================
--- gnome/platform/gnome-desktop.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ gnome/platform/gnome-desktop.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -6,11 +6,11 @@
 
 <!ENTITY gnome-desktop-download-http
-           "&gnome-download-http;/gnome-desktop/&gnome-minor-28;/gnome-desktop-&gnome-desktop-version;.tar.xz">
+           "&gnome-download-http;/gnome-desktop/&gnome-minor-30;/gnome-desktop-&gnome-desktop-version;.tar.xz">
   <!ENTITY gnome-desktop-download-ftp
-           "&gnome-download-ftp;/gnome-desktop/&gnome-minor-28;/gnome-desktop-&gnome-desktop-version;.tar.xz">
-  <!ENTITY gnome-desktop-md5sum        "ad9b66210300239d0a2d0854e9c906d0">
-  <!ENTITY gnome-desktop-size          "1.0 MB">
+           "&gnome-download-ftp;/gnome-desktop/&gnome-minor-30;/gnome-desktop-&gnome-desktop-version;.tar.xz">
+  <!ENTITY gnome-desktop-md5sum        "afcee5e8506bcdc1daaac9e6c3682685">
+  <!ENTITY gnome-desktop-size          "1.1 MB">
   <!ENTITY gnome-desktop-buildsize     "24 MB">
-  <!ENTITY gnome-desktop-time          "0.2 SBU">
+  <!ENTITY gnome-desktop-time          "0.3 SBU">
 ]>
 
@@ -89,4 +89,5 @@
     <bridgehead renderas="sect4">Recommended</bridgehead>
     <para role="recommended">
+      <xref linkend="bubblewrap"/> (needed for thumbnailers in Nautilus) and
       <xref linkend="gobject-introspection"/>
     </para>
@@ -120,4 +121,7 @@
       This package does not come with a test suite.
     </para>
+    <!-- With 3.30.x, test files do exist - the test suite just has not been implemented yet.
+    Upstream had a lot of problems with the new WallClock() API that was implemented with 3.28, which
+    is why a test suite is being implemented.-->
 
     <para>
Index: gnome/platform/libsecret.xml
===================================================================
--- gnome/platform/libsecret.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ gnome/platform/libsecret.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -7,8 +7,8 @@
   <!ENTITY libsecret-download-http "&gnome-download-http;/libsecret/0.18/libsecret-&libsecret-version;.tar.xz">
   <!ENTITY libsecret-download-ftp  "&gnome-download-ftp;/libsecret/0.18/libsecret-&libsecret-version;.tar.xz">
-  <!ENTITY libsecret-md5sum        "c6cf132a56bd346fbf49a43abb02e5c2">
-  <!ENTITY libsecret-size          "480 KB">
-  <!ENTITY libsecret-buildsize     "12 MB">
-  <!ENTITY libsecret-time          "0.2 SBU">
+  <!ENTITY libsecret-md5sum        "376153ece17081eb5410870e0dc5c031">
+  <!ENTITY libsecret-size          "500 KB">
+  <!ENTITY libsecret-buildsize     "17 MB">
+  <!ENTITY libsecret-time          "0.1 SBU">
 ]>
 
Index: gnome/platform/totem-pl-parser.xml
===================================================================
--- gnome/platform/totem-pl-parser.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ gnome/platform/totem-pl-parser.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -117,6 +117,8 @@
 
     <para>
-      To test the results, issue: <command>ninja test</command>. One test,
-      /parser/parsing/podcast_medium, is known to fail in a LFS environment.
+       To test the results, issue: <command>ninja test</command>. <!-- One test,
+       /parser/parsing/podcast_medium, is known to fail in a LFS environment.
+       With 3.26.1 and SVN-20190101, this is no longer true. Check back at 8.4/9.0
+       release time.-->
     </para>
 
Index: gnome/platform/vte.xml
===================================================================
--- gnome/platform/vte.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ gnome/platform/vte.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -7,5 +7,5 @@
   <!ENTITY vte-download-http "&gnome-download-http;/vte/0.54/vte-&vte-version;.tar.xz">
   <!ENTITY vte-download-ftp  "&gnome-download-ftp;/vte/0.54/vte-&vte-version;.tar.xz">
-  <!ENTITY vte-md5sum        "054a8a46b9de9078f81931311cf27a68">
+  <!ENTITY vte-md5sum        "fc0e9de2b6199c69e529ff3629fa35c8">
   <!ENTITY vte-size          "1.0 MB">
   <!ENTITY vte-buildsize     "37 MB (with tests)">
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ introduction/welcome/changelog.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -43,6 +43,49 @@
 -->
     <listitem>
+      <para>January 2nd, 2019</para>
+      <itemizedlist>
+        <listitem>
+          <para>[dj] - Update to make-ca-1.2 and adjust p11-kit configuration
+          for new copy-trust-modifications script.</para>
+        </listitem>
+        <listitem>
+          <para>[dj] - Correct weekly cron job commands for update-pciids.sh
+          and update-usbids.sh, as well as add update-pki.sh.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>January 1st, 2019</para>
       <itemizedlist>
+        <listitem>
+          <para>[renodr] - Update to gnome-desktop-3.30.2. Partially fixes
+          <ulink url="&blfs-ticket-root;11090">#11090</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Added Bubblewrap. Fixes
+          <ulink url="&blfs-ticket-root;11501">#11501</ulink>. Note that this
+          is only used for gnome-desktop.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to vte-0.54.3. Fixes
+          <ulink url="&blfs-ticket-root;11435">#11435</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to WebKitGTK+-2.22.5. Fixes
+          <ulink url="&blfs-ticket-root;11374">#11374</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to libsecret-0.18.7. Fixes
+          <ulink url="&blfs-ticket-root;11491">#11491</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to gjs-1.54.3. Fixes
+          <ulink url="&blfs-ticket-root;11276">#11276</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[dj] - Update to make-ca-1.1. Complete configuration of P11-Kit
+          trust-extract-compat to utilize both P11-kit and make-ca.</para>
+        </listitem> 
         <listitem>
           <para>[bdubbs] - Update to nasm-2.14.02. Fixes
Index: multimedia/libdriv/faac.xml
===================================================================
--- multimedia/libdriv/faac.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ multimedia/libdriv/faac.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -105,6 +105,6 @@
 
     <!-- 1.28: This is still broken, it causes a segfault. -->
-
-    <para><option>--enable-drm</option>: This option is supposed to enable
+    <!--
+    <para><option>- -enable-drm</option>: This option is supposed to enable
     support for encoding files for
     <ulink url="http://www.drm.org/">Digital Radio Mondiale</ulink>, but
@@ -113,5 +113,7 @@
     by <xref linkend="faad2"/>, even if compiled with DRM support).
     Don't use it.</para>
-
+    -->
+    <!-- Since we say "Don't use it", let's not even list it. That would open up
+    the possibility of a user seeing it and enabling it anyway. -->
   </sect2>
 
Index: networking/netlibs/neon.xml
===================================================================
--- networking/netlibs/neon.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ networking/netlibs/neon.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -87,5 +87,6 @@
       <ulink url="https://github.com/libproxy/libproxy">libproxy</ulink>, and
       <ulink url="http://www.manyfish.co.uk/pakchois/">pakchois</ulink>
-      <!-- Note - this URL is broken as of 08-16-2018 -->
+      <!-- Note - this URL is broken as of 08-16-2018
+      01-01-2019 - still broken.  -->
     </para>
 
Index: packages.ent
===================================================================
--- packages.ent	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ packages.ent	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -25,5 +25,5 @@
 <!ENTITY linux-pam-docs-version       "1.2.0">
 <!ENTITY libpwquality-version         "1.4.0">
-<!ENTITY make-ca-version              "1.0">
+<!ENTITY make-ca-version              "1.2">
 <!ENTITY mitkrb-major-version         "1.16">
 <!ENTITY mitkrb-version               "1.16.2">
@@ -271,4 +271,5 @@
 <!ENTITY autofs-version               "5.1.5">
 <!ENTITY bluez-version                "5.50">
+<!ENTITY bubblewrap-version           "0.3.1">
 <!ENTITY colord-version               "1.4.3">
 <!ENTITY cpio-version                 "2.12">
@@ -709,5 +710,5 @@
 <!ENTITY shared-mime-info-version     "1.10">
 <!ENTITY startup-notification-version "0.12">
-<!ENTITY webkitgtk-version            "2.22.2">    <!-- Even minors only -->
+<!ENTITY webkitgtk-version            "2.22.5">    <!-- Even minors only -->
 
 <!ENTITY gtk2-libdir                  "2.0/2.10.0">
Index: postlfs/security/make-ca.xml
===================================================================
--- postlfs/security/make-ca.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ postlfs/security/make-ca.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -12,5 +12,5 @@
   <!ENTITY make-ca-download      "https://github.com/djlucas/make-ca/releases/download/v&make-ca-version;/make-ca-&make-ca-version;.tar.xz">
   <!ENTITY make-ca-size          "28 KB">
-  <!ENTITY make-ca-md5sum        "b038d38233f970aad60c29dfc0502021">
+  <!ENTITY make-ca-md5sum        "5b68cf77b02d5681f8419b8acfd139c0">
 ]>
 
@@ -174,6 +174,21 @@
     either manually, or via a <phrase revision="sysv">cron job.</phrase>
     <phrase revision="systemd">systemd timer. A timer is installed at
-    <filename>/etc/systemd/system/update-pki.timer</filename> that, if enabled,
-    will check for updates weekly.</phrase></para>
+    <filename>/usr/lib/systemd/system/update-pki.timer</filename> that, if
+    enabled, will check for updates weekly. </phrase><phrase revision="sysv">If
+    you've installed <xref linkend="fcron"/> and completed the section on
+    periodic jobs, execute</phrase><phrase revision="systemd">Execute</phrase>
+    the following commands, as the
+    <systemitem class="username">root</systemitem> user, to
+    <phrase revision="sysv">create a weekly cron job:</phrase>
+    <phrase revision="systemd">enable the systemd timer:</phrase>
+    </para>
+
+<screen role="root" revision="sysv"><userinput>cat &gt; /etc/cron.weekly/update-pki.sh &lt;&lt; "EOF" &amp;&amp;
+<literal>#!/bin/bash
+/usr/sbin/make-ca -g</literal>
+EOF
+chmod 754 /etc/cron.weekly/update-pki.sh</userinput></screen>
+
+<screen role="root" revision="systemd"><userinput>systemctl enable update-pki.timer</userinput></screen>
 
   </sect2>
Index: postlfs/security/p11-kit.xml
===================================================================
--- postlfs/security/p11-kit.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ postlfs/security/p11-kit.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -98,8 +98,9 @@
 <screen><userinput>sed '20,$ d' -i trust/trust-extract-compat.in &amp;&amp;
 cat &gt;&gt; trust/trust-extract-compat.in &lt;&lt; "EOF"
-echo "Please create an OpenSSL Trusted Certificate with appropriate"
-echo "trust arguments in /etc/ssl/local/ and run '/usr/sbin/make-ca -f'"
-echo "as the root user."
-exit 1
+<literal># Copy existing anchor modifications to /etc/ssl/local
+/usr/libexec/make-ca/copy-trust-modifications
+
+# Generate a new trust store
+/usr/sbin/make-ca -f -g</literal>
 EOF</userinput></screen>
 
@@ -123,5 +124,7 @@
     </para>
 
-<screen role="root"><userinput>make install</userinput></screen>
+<screen role="root"><userinput>make install &amp;&amp;
+ln -s /usr/libexec/p11-kit/trust-extract-compat \
+      /usr/bin/update-ca-certificates</userinput></screen>
 
   </sect2>
@@ -225,4 +228,17 @@
       </varlistentry>
 
+      <varlistentry id="update-ca-certificates">
+        <term><command>update-ca-certificates</command></term>
+        <listitem>
+          <para>
+            is a command line tool to both extract local certificates from an
+            upadated anchor store, and regenerate all anchors and certificate
+            stores on the system.
+          </para>
+          <indexterm zone="p11-kit update-ca-certificates">
+            <primary sortas="b-trust">update-ca-certificates</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
 
       <varlistentry id="libp11-kit">
Index: x/installing/libinput.xml
===================================================================
--- x/installing/libinput.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ x/installing/libinput.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -221,7 +221,13 @@
     </para>
 
-    <para>
+    <para revision="sysv">
       <option>-Dlibwacom=false</option>: Remove this 
       option if you have the external library libwacom installed.
+    </para>
+
+    <para revision="systemd">
+      <option>-Dlibwacom=false</option>: Remove this option if you
+      have <xref linkend="libwacom"/> installed, or if you are installing
+      GNOME.
     </para>
 
@@ -238,5 +244,5 @@
       <seglistitem>
         <seg>
-          libinput,
+          libinput
           <!-- libinput-debug-events, libinput-list-devices, libinput-measure*,
           libinput-record, libinput-replay Library Executables -->
Index: x/lib/cogl.xml
===================================================================
--- x/lib/cogl.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ x/lib/cogl.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -140,5 +140,6 @@
       To test the results, issue: <command>make check</command>. The
       tests should be run from an X terminal on the hardware accelerated
-      Xorg Server.
+      Xorg Server. A few tests will use all CPUs in parallel, regardless of
+      parallellism settings.
     </para>
 
Index: x/lib/webkitgtk.xml
===================================================================
--- x/lib/webkitgtk.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ x/lib/webkitgtk.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -7,8 +7,8 @@
   <!ENTITY webkitgtk-download-http "https://webkitgtk.org/releases/webkitgtk-&webkitgtk-version;.tar.xz">
   <!ENTITY webkitgtk-download-ftp  " ">
-  <!ENTITY webkitgtk-md5sum        "207d50d313c07b03726f3a7f22643934">
+  <!ENTITY webkitgtk-md5sum        "96a731522b800f38e70f85c22f8de477">
   <!ENTITY webkitgtk-size          "16 MB">
-  <!ENTITY webkitgtk-buildsize     "788 MB (128 MB installed)">
-  <!ENTITY webkitgtk-time          "16 SBU (using parallelism=4, 50 SBUs using one core)">
+  <!ENTITY webkitgtk-buildsize     "789 MB (128 MB installed)">
+  <!ENTITY webkitgtk-time          "20 SBU (using parallelism=4, 65 SBUs using one core)">
 ]>
 
Index: x/wm/openbox.xml
===================================================================
--- x/wm/openbox.xml	(revision 4199730a91bc24a12b0194d849a0d74bcd30d511)
+++ x/wm/openbox.xml	(revision 8f6f10ea86491ea19645d407ef14c3f6ecdf46ca)
@@ -100,5 +100,5 @@
     </note>
 
-    <para>If you installed only Python 3 PyXDG module convert one of the
+    <para>If you only installed the Python 3 PyXDG module convert one of the
     scripts to Python 3:</para>
 
