Source: harfbuzz
Severity: serious
Version: 6.0.0-1
Justification: Policy 2.1
Harfbuzz includes a nondistributable font in its test suite. I thought
it was just in sid/bookworm, but it's apparently also in bullseye as
well.
In bullseye:
test/shaping/data/in-house/fonts/641ca9d7808b01cafa9a666c13811c9b56eb9c52.ttf
In sid:
test/shape/data/in-house/fonts/641ca9d7808b01cafa9a666c13811c9b56eb9c52.ttf
dilinger@hm90:~/sid-build/harfbuzz2$ exiftool -Copyright-en-US
test/shape/data/in-house/fonts/641ca9d7808b01cafa9a666c13811c9b56eb9c52.ttf
Copyright (en-US) : The digitally signed machine readable
Typeface(Font) licensed to you is copyrighted ©, (2010), King Fahd
Glorious Quran Printing Complex...ISBN: 978-603-8010-15-0, Accession
No. 1430/7278..All rights reserved. This Font is the property of King
Fahd Glorious Quran Printing Complex, and may not be reproduced,
modified without the express written approval of King Fahd Glorious
Quran Printing Complex.
Upstream has removed the font, and Debian should as well:
https://github.com/harfbuzz/harfbuzz/issues/4059