diff --git a/NEWS b/NEWS
index 7719a928e..dd07d64c0 100644
--- a/NEWS
+++ b/NEWS
@@ -69,6 +69,9 @@ What's new in Sudo 1.9.6
    return all of a user's non-local groups via getgroups(2), even
    when _DARWIN_UNLIMITED_GETGROUPS is defined.  Bug #946.
 
+ * Fixed a potential use-after-free in the PAM conversation function.
+   Bug #967.
+
 What's new in Sudo 1.9.5p2
 
  * Fixed sudo's setprogname(3) emulation on systems that don't
diff --git a/configure b/configure
index 642e1066f..9c381e4c7 100755
--- a/configure
+++ b/configure
@@ -17100,10 +17100,6 @@ fi
 
 done
 
-		# macOS >= 10.6 getgroups(2) can support more than > 16 groups
-		printf "%s\n" "#define _DARWIN_UNLIMITED_GETGROUPS 1" >>confdefs.h
-
-
 		# We need to force a flat namespace to make libc
 		# symbol hooking work like it does on ELF.
 		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -Wl,-force_flat_namespace" >&5
diff --git a/configure.ac b/configure.ac
index 2d7320b40..a2a258348 100644
--- a/configure.ac
+++ b/configure.ac
@@ -2346,9 +2346,6 @@ case "$host" in
 		# Undocumented API that dynamically allocates the groups.
 		AC_CHECK_FUNCS([getgrouplist_2], [AC_CHECK_DECLS([getgrouplist_2])])
 
-		# macOS >= 10.6 getgroups(2) can support more than > 16 groups
-		AC_DEFINE([_DARWIN_UNLIMITED_GETGROUPS])
-
 		# We need to force a flat namespace to make libc
 		# symbol hooking work like it does on ELF.
 		AX_CHECK_LINK_FLAG([-Wl,-force_flat_namespace], [AX_APPEND_FLAG([-Wl,-force_flat_namespace], [SUDO_LDFLAGS])])