to clarify.. Kerberos package in Leap is inherited from SLE-12, therefore the update is being made against SLE-12. Leap will get the update as soon as SLE-12 gets it.