It appears that upstream commit was already cherry-picked in https://salsa.debian.org/fonts-team/fontforge/-/commit/ad2b5f648241de5920a6f7f738dea091290a0af0, so all it needs is a release (and ideally a mention to this bug in the changelog next to the "add patches cherry-picked upstream to fix a range of issues" line).
>