https://bugs.openldap.org/show_bug.cgi?id=10404
--- Comment #22 from Howard Chu hyc@openldap.org --- For reference, the krb5_get_error_message leak appears to have been fixed in 2020 commit 739f7e0484e412de7de6d5ef1100fcc20836d19d, so it seems they're using quite an old build of Heimdal.