I'm not sure how I missed this when it first came in. It looks like this may be fixed already by upstream's commit https://github.com/krb5/krb5/commit/dab1c234 which is in 1.12.1 (i.e., any debian version from a newer pocket than jessie, at this point).
Could you test with newer krb5 packages and report whether the bug is still present? -Ben
