diff --git a/cf/valgrind-suppressions b/cf/valgrind-suppressions
index ab5ba5288..f61050958 100644
--- a/cf/valgrind-suppressions
+++ b/cf/valgrind-suppressions
@@ -1,4 +1,3 @@
-# $Id$
 {
    linux db init brokenness
    Memcheck:Param
@@ -82,3 +81,74 @@
    obj:/lib/ld-2.5.so
    obj:/lib/ld-2.5.so
 }
+{
+   glibc sed leak 1
+   Memcheck:Leak
+   match-leak-kinds: definite
+   fun:calloc
+   obj:/bin/sed
+   obj:/bin/sed
+   obj:/bin/sed
+   obj:/bin/sed
+   obj:/bin/sed
+   fun:(below main)
+}
+{
+   Heimdal one-time init leak 1
+   Memcheck:Leak
+   match-leak-kinds: possible
+   fun:malloc
+   fun:heim_dict_set_value
+   fun:_krb5_load_plugins
+   fun:init_context_once
+   fun:once_callback_caller
+   fun:pthread_once
+   fun:heim_base_once_f
+   fun:krb5_init_context
+   fun:main
+}
+{
+   Heimdal one-time init leak 2
+   Memcheck:Leak
+   match-leak-kinds: possible
+   fun:calloc
+   fun:_heim_alloc_object
+   fun:heim_string_create_with_bytes
+   fun:heim_string_create
+   fun:_krb5_load_plugins
+   fun:init_context_once
+   fun:once_callback_caller
+   fun:pthread_once
+   fun:heim_base_once_f
+   fun:krb5_init_context
+   fun:main
+}
+{
+   Heimdal one-time init leak 3
+   Memcheck:Leak
+   match-leak-kinds: possible
+   fun:calloc
+   fun:_heim_alloc_object
+   fun:heim_dict_create
+   fun:_krb5_load_plugins
+   fun:init_context_once
+   fun:once_callback_caller
+   fun:pthread_once
+   fun:heim_base_once_f
+   fun:krb5_init_context
+   fun:main
+}
+{
+   Heimdal one-time init leak 4
+   Memcheck:Leak
+   match-leak-kinds: possible
+   fun:calloc
+   fun:heim_dict_create
+   fun:_krb5_load_plugins
+   fun:init_context_once
+   fun:once_callback_caller
+   fun:pthread_once
+   fun:heim_base_once_f
+   fun:krb5_init_context
+   fun:main
+}