Looking into this, I found this note:
usr.bin/finger/util.c 1.29
In find_idle_and_ttywrite(), initialize idletime and writable to 0
when stat() fails. this prevents a coredump later in stimeprint()
due to gmtime() returning NULL for an uninitialized idletime.
[chs, ticket #1137]
here :
http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/src/doc/Attic/CHANGES-7.1?rev=1.1.2.106.2.2&content-type=text/plain
Regarding https://sources.debian.org/src/bsd-finger/0.17-17/finger/util.c/
it seems that the version here is:
#ifndef lint
/*static char sccsid[] = "from: @(#)util.c 5.14 (Berkeley) 1/17/91";*/
char util_rcsid[] = "$Id: util.c,v 1.18 1999/09/28 22:53:58 netbug Exp $";
#endif /* not lint */
I do not know if the Linux port of those BSD tools is still maintained somewhere
and how hard it is to package them into Debian.
Sure here: http://ftp.linux.org.uk/pub/linux/Networking/netkit/
everything seems frozen since 2000-07-31.
There is also: http://ftp.linux.org.uk/pub/linux/Networking/netkit-devel/
where it exists a 0.18-pre1 version dating 2002-08-01.
But I hope it helps!