Please note that most of the code in othersubrs.c was relicensed. In the forwarded URL I have extracted the two offending arrays with PS code to a new file that could be removed from the tarball easily and replaced by a file with two empty arrays during build.
This only affects Multi Master fonts. I have not found any Multi Master font in Debian except in fontforge's test data. The Multi Master fonts are largely out of fashion. @Release Team: I suggest to no longer ignore this issue. As long as the Pull Request is not in upstream releases please replace the two arrays with empty ones via a patch.

