Closes: #1021846. Thanks to программист некто for helping to debug the
problem!

Make font fallback handling work!

Due to a mistake in the buster update that left the CVE-2022-2601 bugs
in place, we need to bump SBAT for all of the Debian GRUB binaries. :-(

The previous security updates disallowed loading unsigned fonts when
in SB mode. To make things work again:

 * Embed the "unicode" font into the embedded memdisk image so it can
   be loaded.
 * Add the memdisk to our normal grubx64.efi loader too
 * Add a patch from Chris Coulson to make the font loader look for
   fonts in the memdisk whenever they're loaded.

Closes: #1024395, #1025352, #1024447

CVE-2022-2601, CVE-2022-3775

Bump SBAT level to 3 for grub-efi packages

In some filesystem utils like mksquashfs, it will silently change
behaviour and cause timestamps to unexpectedly change. Reproducible
builds are good and useful for shipped artifacts, but this causes
build-time tests to fail.

Closes: #1017944. Thanks to Valentin Kleibel for the patch.

it's apparently not needed. Closes: #1013698

to /etc/default/grub to make it easier for users to turn os-prober
back on if they want it. Closes: #1013797

As used in Ubuntu and possibly other downstreams (maybe Debian one day),
as that breaks the build.

Closes: #1007706

Thanks, John Paul Adrian Glaubitz.

Closes: #952815

Changes-By: lintian-brush
Fixes: lintian: upstream-metadata-file-is-missing
See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html
Fixes: lintian: upstream-metadata-missing-repository
See-also: https://lintian.debian.org/tags/upstream-metadata-missing-repository.html

Changes-By: lintian-brush
Fixes: lintian: package-uses-old-debhelper-compat-version
See-also: https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html

Add missing ${misc:Depends} to Depends for grub-efi-ia32-signed-template, grub-efi-amd64-signed-template, grub-efi-arm64-signed-template.

Changes-By: lintian-brush
Fixes: lintian: debhelper-but-no-misc-depends
See-also: https://lintian.debian.org/tags/debhelper-but-no-misc-depends.html

Changes-By: lintian-brush
Fixes: lintian: tab-in-license-text
See-also: https://lintian.debian.org/tags/tab-in-license-text.html

Changes-By: lintian-brush
Fixes: lintian: trailing-whitespace
See-also: https://lintian.debian.org/tags/trailing-whitespace.html

Closes: #997100

This was only needed for upgrades from before jessie.

Make it easier to debug things.