Justin T Pryzby <justinpry...@users.sourceforge.net> writes: > I think you forgot the patch, could you send it now?
Ah yes indeed, it was only in the upstream bug report. It should be now attached to the debian bug report too.
--- sudo-1.7.2p1/logging.c 2009-05-25 12:02:41.000000000 +0000 +++ sudo-1.7.2p1.new/logging.c 2010-02-01 18:13:44.000000000 +0000 @@ -391,7 +391,8 @@ else warningx("%s", message); } - efree(message); + if (logline != message) + efree(message); /* * Send a copy of the error via mail. @@ -407,8 +408,7 @@ if (def_logfile) do_logfile(logline); - if (logline != message) - efree(logline); + efree(logline); if (!ISSET(flags, NO_EXIT)) { cleanup(0);