Index: general/prog/lxml.xml
===================================================================
--- general/prog/lxml.xml	(revision cceceaaf9ff6a4bae7473bdb42c7c7ab452d0c5a)
+++ general/prog/lxml.xml	(revision a2ce7538c2f1fc95456572ecb58a9e02fc4a98f9)
@@ -7,8 +7,8 @@
   <!ENTITY lxml-download-http "&pymodules-dl;/l/lxml/lxml-&lxml-version;.tar.gz">
   <!ENTITY lxml-download-ftp  " ">
-  <!ENTITY lxml-md5sum        "2e39c6e17d61f61e5be68fd328ba6a51">
+  <!ENTITY lxml-md5sum        "017f94473dcec0f9b2e9b03524398fa5">
   <!ENTITY lxml-size          "3.0 MB">
-  <!ENTITY lxml-buildsize     "168 MB (add 51 MB for tests)">
-  <!ENTITY lxml-time          "1.6 SBU (add 1.6 SBU for tests)">
+  <!ENTITY lxml-buildsize     "204 MB (add 29 MB for tests)">
+  <!ENTITY lxml-time          "1.6 SBU (add 0.6 SBU for tests)">
 ]>
 
Index: general/prog/valgrind.xml
===================================================================
--- general/prog/valgrind.xml	(revision cceceaaf9ff6a4bae7473bdb42c7c7ab452d0c5a)
+++ general/prog/valgrind.xml	(revision a2ce7538c2f1fc95456572ecb58a9e02fc4a98f9)
@@ -7,8 +7,8 @@
   <!ENTITY valgrind-download-http "https://sourceware.org/ftp/valgrind/valgrind-&valgrind-version;.tar.bz2">
   <!ENTITY valgrind-download-ftp  "ftp://sourceware.org/pub/valgrind/valgrind-&valgrind-version;.tar.bz2">
-  <!ENTITY valgrind-md5sum        "d1b153f1ab17cf1f311705e7a83ef589">
+  <!ENTITY valgrind-md5sum        "afe11b5572c3121a781433b7c0ab741b">
   <!ENTITY valgrind-size          "16 MB">
-  <!ENTITY valgrind-buildsize     "615 MB (add 100 MB for tests)">
-  <!ENTITY valgrind-time          "0.6 SBU (Using parallelism=4; add 7.7 SBU for tests)">
+  <!ENTITY valgrind-buildsize     "629 MB (add 103 MB for tests)">
+  <!ENTITY valgrind-time          "0.5 SBU (Using parallelism=4; add 7.9 SBU for tests)">
 ]>
 
@@ -120,4 +120,5 @@
 <screen><userinput remap="pre">patch -Np1 -i ../valgrind-&valgrind-version;-gcc_10-fixes-1.patch</userinput></screen>
 -->
+<!-- Not needed with 3.17.0
     <para>
       First, adapt the tests to glibc-2.33:
@@ -125,4 +126,5 @@
 
 <screen><userinput remap="pre">sed -i 's/arm64/amd64/' gdbserver_tests/nlcontrolc.vgtest</userinput></screen>
+-->
 
     <para>
@@ -195,5 +197,5 @@
     <segmentedlist>
       <segtitle>Installed Programs</segtitle>
-      <segtitle>Installed Library</segtitle>
+      <segtitle>Installed Libraries</segtitle>
       <segtitle>Installed Directories</segtitle>
 
@@ -212,4 +214,5 @@
         </seg>
         <seg>
+           <!-- Moved to /usr/lib/valgrind in 3.17.0
           libcoregrind-&lt;Arch&gt;-linux.a,
           libgcc-sup-&lt;Arch&gt;-linux.a,
@@ -224,4 +227,6 @@
           vgpreload_memcheck-&lt;Arch&gt;-linux.so, where
           &lt;Arch&gt; is x86 or amd64
+          -->
+          None
         </seg>
         <seg>
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision cceceaaf9ff6a4bae7473bdb42c7c7ab452d0c5a)
+++ introduction/welcome/changelog.xml	(revision a2ce7538c2f1fc95456572ecb58a9e02fc4a98f9)
@@ -46,4 +46,25 @@
       <itemizedlist>
         <listitem>
+          <para>[renodr] - Update to cairo-1.17.4. Fixes
+          <ulink url="&blfs-ticket-root;14802">#14802</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to Thunar-4.16.6. Fixes
+          <ulink url="&blfs-ticket-root;14806">#14806</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to nettle-3.7.2 (Security Update). Fixes
+          <ulink url="&blfs-ticket-root;14807">#14807</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to lxml-4.6.3 (Python Module). Includes a 
+          fix for a security vulnerability. Fixes
+          <ulink url="&blfs-ticket-root;14808">#14808</ulink>.</para>
+        </listitem>
+        <listitem>
+          <para>[renodr] - Update to valgrind-3.17.0. Fixes
+          <ulink url="&blfs-ticket-root;14809">#14809</ulink>.</para>
+        </listitem>
+        <listitem>
           <para>[renodr] - Update to links-2.22. Fixes
           <ulink url="&blfs-ticket-root;14787">#14787</ulink>.</para>
Index: packages.ent
===================================================================
--- packages.ent	(revision cceceaaf9ff6a4bae7473bdb42c7c7ab452d0c5a)
+++ packages.ent	(revision a2ce7538c2f1fc95456572ecb58a9e02fc4a98f9)
@@ -26,5 +26,5 @@
 <!ENTITY mitkrb-version               "&mitkrb-major-version;.1">
 <!ENTITY nftables-version             "0.9.3">
-<!ENTITY nettle-version               "3.7.1">
+<!ENTITY nettle-version               "3.7.2">
 
 <!ENTITY nss-minor-version            "63">
@@ -384,5 +384,5 @@
 <!ENTITY vala-major-version           "0.50">  <!-- even minors only -->
 <!ENTITY vala-version                 "&vala-major-version;.4">
-<!ENTITY valgrind-version             "3.16.1">
+<!ENTITY valgrind-version             "3.17.0">
 <!ENTITY yasm-version                 "1.3.0">
 
@@ -560,5 +560,5 @@
 <!ENTITY Jinja2-version               "2.11.3">
 <!-- libxml2 for Python2 shares the version of libxml2 -->
-<!ENTITY lxml-version                 "4.6.2">
+<!ENTITY lxml-version                 "4.6.3">
 <!ENTITY mako-version                 "1.1.4">
 <!ENTITY MarkupSafe-version           "1.1.1">
@@ -727,5 +727,5 @@
 <!ENTITY at-spi2-core-version         "2.38.0">
 <!ENTITY at-spi2-atk-version          "2.38.0">
-<!ENTITY cairo-version                "1.17.2+f93fc72c03e">
+<!ENTITY cairo-version                "1.17.4">
 <!ENTITY cairomm-1.0-version          "1.14.0">
 <!ENTITY cairomm-version              "1.16.0">
@@ -834,5 +834,5 @@
 <!ENTITY garcon-minor                 "4.16">
 <!ENTITY garcon-version               "4.16.1">
-<!ENTITY thunar-version               "4.16.5">
+<!ENTITY thunar-version               "4.16.6">
 <!ENTITY thunar-volman-version        "4.16.0">
 <!ENTITY tumbler-version              "4.16.0">
Index: postlfs/security/nettle.xml
===================================================================
--- postlfs/security/nettle.xml	(revision cceceaaf9ff6a4bae7473bdb42c7c7ab452d0c5a)
+++ postlfs/security/nettle.xml	(revision a2ce7538c2f1fc95456572ecb58a9e02fc4a98f9)
@@ -7,7 +7,7 @@
   <!ENTITY nettle-download-http "&gnu-http;/nettle/nettle-&nettle-version;.tar.gz">
   <!ENTITY nettle-download-ftp  "&gnu-ftp;/nettle/nettle-&nettle-version;.tar.gz">
-  <!ENTITY nettle-md5sum        "4d23a99df650ee88511653fb9acea3f0">
+  <!ENTITY nettle-md5sum        "22849db27ed563ebbc829273f0c97e35">
   <!ENTITY nettle-size          "2.3 MB">
-  <!ENTITY nettle-buildsize     "89 MB (with tests)">
+  <!ENTITY nettle-buildsize     "88 MB (with tests)">
   <!ENTITY nettle-time          "0.4 SBU (with tests)">
 ]>
@@ -70,12 +70,12 @@
       </listitem>
     </itemizedlist>
-<!--
+
     <bridgehead renderas="sect3">Nettle Dependencies</bridgehead>
 
     <bridgehead renderas="sect4">Optional</bridgehead>
     <para role="optional">
-      <xref linkend="openssl"/> (for examples)
-    </para>
--->
+      <xref linkend="valgrind"/> (optional for the tests)
+    </para>
+
     <para condition="html" role="usernotes">User Notes:
       <ulink url="&blfs-wiki;/nettle"/>
@@ -175,8 +175,8 @@
         <listitem>
           <para>
-            password-based key derivation function that take as input a
-            password or passphrase and typically strengthen it and protect
-            against certain pre-computation attacks by using salting and
-            expensive computation
+            is a password-based key derivation function that takes a password
+            or a passphrase as input and returns a strengthened password,
+            which is protected against pre-computation attacks by using
+            salting and other expensive computations.
           </para>
           <indexterm zone="nettle nettle-pbkdf2">
Index: x/lib/cairo.xml
===================================================================
--- x/lib/cairo.xml	(revision cceceaaf9ff6a4bae7473bdb42c7c7ab452d0c5a)
+++ x/lib/cairo.xml	(revision a2ce7538c2f1fc95456572ecb58a9e02fc4a98f9)
@@ -5,13 +5,11 @@
   %general-entities;
 
-  <!--
-  <!ENTITY cairo-download-http "https://www.cairographics.org/releases/cairo-&cairo-version;.tar.xz">
-  -->
-  <!ENTITY cairo-download-http "&sources-anduin-http;/cairo/cairo-&cairo-version;.tar.xz">
+  <!ENTITY cairo-download-http "https://www.cairographics.org/snapshots/cairo-&cairo-version;.tar.xz">  
+  <!--<!ENTITY cairo-download-http "&sources-anduin-http;/cairo/cairo-&cairo-version;.tar.xz">-->
   <!ENTITY cairo-download-ftp  " ">
-  <!ENTITY cairo-md5sum        "23a9420780f74ad0ca1e9885e53ee022">
+  <!ENTITY cairo-md5sum        "bf9d0d324ecbd350d0e9308125fa4ce0">
   <!ENTITY cairo-size          "40 MB">
-  <!ENTITY cairo-buildsize     "148 MB">
-  <!ENTITY cairo-time          "0.9 SBU">
+  <!ENTITY cairo-buildsize     "154 MB">
+  <!ENTITY cairo-time          "0.8 SBU">
 ]>
 
@@ -144,6 +142,5 @@
     </para>
 
-<screen><userinput>autoreconf -fv              &amp;&amp;
-./configure --prefix=/usr    \
+<screen><userinput>./configure --prefix=/usr    \
             --disable-static \
             --enable-tee &amp;&amp;
@@ -152,4 +149,8 @@
     <para>
       This package does not have a working testsuite.
+      <!-- The test suite can be run with 'make check', but 488 tests fail and
+      59 tests pass. This seems to be due to minute changes in the expected
+      output, similar to librsvg's tests. Since it's a huge chunk of the tests,
+      let's keep it as "broken" for now.-->
     </para>
 
@@ -164,4 +165,5 @@
     <title>Command Explanations</title>
 
+<!-- Not needed with 1.17.4
     <para>
       <parameter>autoreconf -fv</parameter>: This prevents
@@ -170,4 +172,5 @@
       definitions came from a previous version.
     </para>
+-->
 
     <para>
@@ -215,5 +218,5 @@
       <seglistitem>
         <seg>
-          cairo-sphinx and cairo-trace
+          cairo-trace
         </seg>
         <seg>
@@ -232,4 +235,5 @@
       <?dbhtml list-presentation="table"?>
 
+<!--
      <varlistentry id="cairo-sphinx">
         <term><command>cairo-sphinx</command></term>
@@ -243,4 +247,5 @@
         </listitem>
       </varlistentry>
+-->
 
       <varlistentry id="cairo-trace">
Index: xfce/core/thunar.xml
===================================================================
--- xfce/core/thunar.xml	(revision cceceaaf9ff6a4bae7473bdb42c7c7ab452d0c5a)
+++ xfce/core/thunar.xml	(revision a2ce7538c2f1fc95456572ecb58a9e02fc4a98f9)
@@ -8,7 +8,7 @@
            "http://archive.xfce.org/src/xfce/thunar/&xfce4-version;/thunar-&thunar-version;.tar.bz2">
   <!ENTITY thunar-download-ftp  " ">
-  <!ENTITY thunar-md5sum        "eb97f29f3ecfcb36e1219ac8bd935cd4">
-  <!ENTITY thunar-size          "2.4 MB">
-  <!ENTITY thunar-buildsize     "53 MB">
+  <!ENTITY thunar-md5sum        "eab974609004395c2af42d466b3f3bca">
+  <!ENTITY thunar-size          "2.3 MB">
+  <!ENTITY thunar-buildsize     "65 MB">
   <!ENTITY thunar-time          "0.5 SBU">
 ]>
