View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2025-3576 severity moderate: SUSE including 357 source package names (0.0.17-1.1:krb5-1.20.1-150600.11.14.1, 0.1.6-2.11:krb5-1.20.1-150600.11.14.1, …), 937 product×package rows across 362 product lines (Container bci/kiwi, Container bci/spack, … (362 product lines)): Fixed 687, Known Affected 226, Known Not Affected 24.
A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.