main/sudo: backport patch to fix crash on old kernels

In postmarketOS (which uses Alpine's repositories to a large degree), we
unfortunately have many devices that use old kernels without the
getrandom() syscall. This backports a merged patch from upstream that
works around this by using sudo's own implementation of getentropy()
instead of the one from your C standard library as the default on Linux.
8 jobs for !26610 with sudo-unlasted-kernel in 8 minutes and 2 seconds (queued for 5 seconds)
detached
Status Job ID Name Coverage
  Lint
passed lint #517115
docker-alpine x86_64

00:00:18

 
  Build
passed build-aarch64 #517120
docker-alpine ci-build aarch64

00:01:46

passed build-armhf #517122
docker-alpine ci-build armhf

00:01:47

passed build-armv7 #517121
docker-alpine ci-build armv7

00:01:18

passed build-ppc64le #517119
docker-alpine ci-build ppc64le

00:01:37

passed build-s390x #517118
docker-alpine ci-build s390x

00:01:03

passed build-x86 #517117
docker-alpine ci-build x86

00:01:02

passed build-x86_64 #517116
docker-alpine ci-build x86_64

00:00:44