Source: heimdal Severity: serious There have been no upstream releases of Heimdal in over 4 years and there is no current release management or QA upstream. After 1.6RC2, prior to which releases were fairly frequent (every month or so), no new releases have happened.
The last full feature release was 1.5 (September 2011). Debian has packaged snapshots of Heimdal for a while, mostly because Samba (which bundles Heimdal) uses it, and it needs specific features to be compatible with AD. However, Samba turned out too be too closely coupled to a specific Heimdal version; using a different Heimdal snapshot than what upstream Samba was using caused subtle bugs, in part because the extensive QA that happened upstream didn't happen in Debian. Since then, the Samba package has changed to use the bundled Heimdal. See also https://lists.alioth.debian.org/pipermail/pkg-samba-maint/2015-April/017277.html Upstream Heimdal is still somewhat active; most contributors just seem to run Git snapshots in their own environments. There is a long open bug in master that makes Heimdal unusable on 32 bit platforms (#822749) and at the moment of writing, ./configure doesn't run in master on Debian unstable. At this point it seems very unlikely that upstream will release a 1.7 before Debians next soft freeze. As maintainers, we don't want to package a 4 year old Heimdal 1.5 or have Debian support a git snapshot for the next couple of years. -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.6.0-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)
