[3.11] main/sudo: patch CVE-2021-3156

Upstream has not backported the fixes for 1.8.x, so rebase the commits that fix CVE-2021-3156.

Source:

• https://github.com/sudo-project/sudo/commit/29acc6419270d4dc8413c18517e089b4d2dc6907
• https://github.com/sudo-project/sudo/commit/888f63a9c8b4a848d1049871c05ce3656c015ffc
• https://github.com/sudo-project/sudo/commit/c9eff93854f53fdc8f57744c7f069388b6753393
• https://github.com/sudo-project/sudo/commit/dceab7d756ebcad8e6d2e9f6a4b3937e827abc25
• https://github.com/sudo-project/sudo/commit/8ca47cc99d47214cdb4f583a14771fce5e3a9c1e

See: #12356