Review: harfbuzz 14.2.1+ds-1
Package Information
| Description | OpenType text shaping engine (shared library) HarfBuzz is an implementation of the OpenType Layout engine (aka layout engine) and the script-specific logic (aka shaping engine). This package contains the shared libraries. |
|---|---|
| Maintainer | Debian freedesktop.org maintainers <pkg-freedesktop-maintainers@lists.alioth.debian.org> |
| Changed By | Bastian Germann <bage@debian.org> |
| Sponsor | bage@debian.org |
| Distribution | experimental |
| Architecture | any all |
| VCS | git: https://salsa.debian.org/freedesktop-team/harfbuzz.git (browse) |
| Closes | #1131351, #1151016 |
| Popcon Installs | 207371 |
| Binary NEW | Yes (new binary packages of a source already in sid) |
| Tracker | https://tracker.debian.org/pkg/harfbuzz |
| Uploaded | 3 days ago |
New Package Report
.changes
| Architecture | source amd64 all |
|---|---|
| Distribution | experimental |
| Date | Tue, 27 Oct 2026 13:00:32 +0100 |
| Source | harfbuzz |
| Version | 14.2.1+ds-1 |
| Changed-By | Bastian Germann <bage@debian.org> |
Changelog
harfbuzz (14.2.1+ds-1) experimental; urgency=medium
.
* Team upload
* Team-maintain according to the Vcs fields
* New upstream release (Closes: #1131351)
* Move from freedesktop to GitHub
* Exclude Ubuntu Font (Closes: #1151016)
* Hide internal C++ template instantiation symbols
* d/copyright: Add missing info, exclude more files
.
[ أحمد المحمودي (Ahmed El-Mahmoudy) ]
* Add libharfbuzz-{vector,raster,gpu}0 binary packages
* Update symbols
* d/t/control: change pkg-config dep to pkgconf
* d/control: add libpng-dev & zlib1g-dev to build-deps
* d/control: bump standards version to 4.7.4.dsc
| Section | introspection |
|---|---|
| Priority | optional |
| Component | main |
| Package-List | gir1.2-harfbuzz-0.0 deb introspection optional arch=any libharfbuzz-bin deb utils optional arch=any libharfbuzz-cairo0 deb libs optional arch=any libharfbuzz-dev deb libdevel optional arch=any libharfbuzz-doc deb doc optional arch=all libharfbuzz-gobject0 deb libs optional arch=any libharfbuzz-gpu0 deb libs optional arch=any libharfbuzz-icu0 deb libs optional arch=any libharfbuzz-raster0 deb libs optional arch=any libharfbuzz-subset0 deb libs optional arch=any libharfbuzz-vector0 deb libs optional arch=any libharfbuzz0-udeb udeb debian-installer optional arch=any libharfbuzz0b deb libs optional arch=any |
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: HarfBuzz
Upstream-Contact: Behdad Esfahbod
Source: https://github.com/harfbuzz/harfbuzz
Files-Excluded:
perf/texts
test/subset/data/expected/glyph_names/*
test/subset/data/fonts/Ubuntu-Regular.ttf
xkcd.png
Comment:
Exclude non-DFSG-free files.
Files: *
Copyright: 2018-2020, Adobe, Inc
2005-2024, Behdad Esfahbod
2007, Chris Wilson
2011, Codethink Limited
2005, David Turner
1998-2004, David Turner and Werner Lemberg
2015-2020, Ebrahim Byagowi
2016, Elie Roux
2019-2020, Facebook, Inc
2010-2024, Google, Inc
2016, Igalia S.L
2009, Keith Stribley
2018-2021, Khaled Hosny
2011, Martin Hosken and SIL International
2022, Matthias Clasen
2012-2015, Mozilla Foundation
2008-2010, Nokia Corporation and/or its subsidiary(-ies)
1998-2023, Red Hat, Inc
2013-2015, Alexei Podtelezhnikov
2012 Zilong Tan <eric.zltan@gmail.com>
2024 David Corbett
License: MIT
Files: debian/*
Copyright: 2012-2019,2023,2025-2026, أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy@users.sourceforge.net>
License: MIT
Files: src/ms-use/*
Copyright: (c) Microsoft Corporation.
License: Expat
Files: src/hb-gpu-fragment*glsl*
Copyright:
Copyright (C) 2026 Behdad Esfahbod
Copyright (C) 2017 Eric Lengyel
License: MIT
Files: src/hb-cairo-utils.cc
Copyright: © 2022 Red Hat, Inc
Copyright © 2021, 2022 Black Foundry
License: MIT
Files: util/gpu/matrix4x4.hh
Copyright:
Copyright (c) 2009, Mozilla Corp
Copyright (c) 2012, Google, Inc.
All rights reserved.
License: BSD-3-clause
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
* Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
* Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
* Neither the name of the <organization> nor the
names of its contributors may be used to endorse or promote products
derived from this software without specific prior written permission.
.
THIS SOFTWARE IS PROVIDED BY <copyright holder> ''AS IS'' AND ANY
EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL <copyright holder> BE LIABLE FOR ANY
DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Files: util/gpu/trackball.hh
Copyright:
(c) Copyright 1993, 1994, Silicon Graphics, Inc.
ALL RIGHTS RESERVED
License: SGI-OpenGL
Permission to use, copy, modify, and distribute this software for
any purpose and without fee is hereby granted, provided that the above
copyright notice appear in all copies and that both the copyright notice
and this permission notice appear in supporting documentation, and that
the name of Silicon Graphics, Inc. not be used in advertising
or publicity pertaining to distribution of the software without specific,
written prior permission.
.
THE MATERIAL EMBODIED ON THIS SOFTWARE IS PROVIDED TO YOU "AS-IS"
AND WITHOUT WARRANTY OF ANY KIND, EXPRESS, IMPLIED OR OTHERWISE,
INCLUDING WITHOUT LIMITATION, ANY WARRANTY OF MERCHANTABILITY OR
FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL SILICON
GRAPHICS, INC. BE LIABLE TO YOU OR ANYONE ELSE FOR ANY DIRECT,
SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY
KIND, OR ANY DAMAGES WHATSOEVER, INCLUDING WITHOUT LIMITATION,
LOSS OF PROFIT, LOSS OF USE, SAVINGS OR REVENUE, OR THE CLAIMS OF
THIRD PARTIES, WHETHER OR NOT SILICON GRAPHICS, INC. HAS BEEN
ADVISED OF THE POSSIBILITY OF SUCH LOSS, HOWEVER CAUSED AND ON
ANY THEORY OF LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE
POSSESSION, USE OR PERFORMANCE OF THIS SOFTWARE.
.
US Government Users Restricted Rights
Use, duplication, or disclosure by the Government is subject to
restrictions set forth in FAR 52.227.19(c)(2) or subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software
clause at DFARS 252.227-7013 and/or in similar or successor
clauses in the FAR or the DOD or NASA FAR Supplement.
Unpublished-- rights reserved under the copyright laws of the
United States. Contractor/manufacturer is Silicon Graphics,
Inc., 2011 N. Shoreline Blvd., Mountain View, CA 94039-7311.
.
OpenGL(TM) is a trademark of Silicon Graphics, Inc.
Files: util/hb-fc-list.c
Copyright: © 2002 Keith Packard
Copyright © 2014 Google, Inc.
License: HPND-sell-variant
Files: src/hb-unicode-emoji-table.hh
Copyright: 2024, Unicode®, Inc
License: Unicode
Comment: https://www.unicode.org/terms_of_use.html
Files: src/hb-ucd.cc
Copyright: 2012, Grigori Goronzy <greg@kinoho.net>
License: ISC
Files: test/shape/data/text-rendering-tests/*
Copyright: 2016, Unicode Inc
License: Apache-2.0
Files: perf/fonts/Amiri-Regular.ttf
perf/fonts/Gulzar-Regular.ttf
perf/fonts/NotoNastaliqUrdu-Regular.ttf
perf/fonts/NotoSansDuployan-Regular.otf
test/api/fonts/*
test/fuzzing/fonts/*
test/shape/data/text-rendering-tests/fonts/*
Copyright: 2002-2018, Adobe Systems Incorporated
2017-2019, Amin Abedi (@aminabedi68)-www.fontamin.com
2015, Cadson Demak <info@cadsondemak.com>
2011-2020, Google Inc
2016, Igalia S.L. (http://igalia.com/)
2017, Jens Kutilek
2010-2017, Khaled Hosny <khaledhosny@eglug.org>
2016, Sascha Brawer
2010, Sebastian Kosch <sebastian@aldusleaf.org>
2008, The Bungee Project Authors <david@djr.com>
1993-2016, The Font Bureau, Inc
2016, The M+ Project Authors
2021, The Qahiri Project Authors (github.com/aliftype/qahiri)
2021, The Gulzar Project Authors (https://github.com/simoncozens/Gulzar)
2016-2019, Unicode, Inc
License: OFL-1.1
Files: test/shape/data/in-house/fonts/*
Copyright: 2000-2016, Adobe Systems Incorporated
2016, Alfredo Marco Pradil
2018-2022, David Corbett
2010-2022, Google, Inc
2011-2012, Lohit Fonts Project contributors <https://pagure.io/lohit>
2013-2020, Microsoft Corporation
2018, SIL International (http://scripts.sil.org)
2010-2021, The Amiri Project Authors (https://github.com/aliftype/amiri)
2015-2021, The Mada Project Authors
2021, The Qahiri Project Authors (github.com/aliftype/qahiri)
2021, The Raqq Project Authors (github.com/aliftype/raqq)
2018, Unicode, Inc
2005, Zawgyi.net & Alpha Mandalay
License: OFL-1.1
Files: test/subset/data/*
Copyright: 2002-2018, Adobe Systems Incorporated (http://www.adobe.com/)
2012, Andhrapradesh Society for Knowledge Networks (fonts.siliconandhra.org)
2013, Danh Hong (khmertype.org)
2007, Denis Moyogo Jacquerye <moyogo@gmail.com>
2011-2012, George W. Nuss (http://www.fulbefouta.com)
2010-2016, Google Inc
2011, Hjort Nidudsson
2019, Inter IKEA Systems B.V. (www.ikea.com)
2010, NHN Corporation
2011-2012, Sorkin Type Co (www.sorkintype.com)
2013, The Alegreya Sans Project Authors (https://github.com/huertatipografica/Alegreya-Sans)
2010-2020, The Amiri Project Authors (https://github.com/alif-type/amiri)
2008, The Bungee Project Authors <david@djr.com>
2007-2008, The C&MA Guinea Fulbe Team
2011, The Comfortaa Project Authors (https://github.com/alexeiva/comfortaa)
2020, The Fraunces Project Authors (github.com/undercasetype/Fraunces)
2016, The M+ Project Authors
2021, The M+ FONTS Project Authors (https://github.com/coz-m/MPLUS_FONTS)
2019, The Noto Project Authors (github. com/googlei18n/noto-fonts)
2017, The Roboto Flex Project Authors (https://github.com/TypeNetwork/Roboto-Flex)
2004-2020, SIL International (http://www.sil.org)
2017, The Spectral Project Authors (http://github.com/productiontype/spectral)
2001-2021, The STIX Fonts Project Authors (https://github.com/stipub/stixfonts)
License: OFL-1.1
Files: test/shape/data/aots/*
Copyright: 2000-2016, Adobe Systems Incorporated
License: Apache-2.0
Files: perf/fonts/Roboto-Regular.ttf
test/api/fonts/nameID.origin.ttf
test/api/fonts/nameID.override.expected.ttf
test/api/fonts/OpenSans-Regular.ttf
test/shape/data/text-rendering-tests/fonts/TestShapeKndaV3.ttf
test/subset/data/fonts/Tinos-Italic.ttf
test/subset/data/fonts/IndicTestHowrah-Regular.ttf
test/subset/data/fonts/IndicTestJalandhar-Regular.ttf
test/subset/data/fonts/Roboto-Regular.ttf
test/subset/data/fonts/Roboto-Variable.ttf
Copyright: 2010-2013, Google Corporation
License: Apache-2.0
Files: test/shape/data/in-house/fonts/e8691822f6a705e3e9fb48a0405c645b1a036590.ttf
Copyright: 2020, Fredrick R. Brennan
License: Apache-2.0
Files: test/subset/data/fonts/Khmer.ttf
Copyright: 2013, Danh Hong (khmertype.org)
License: Apache-2.0
Files: test/api/fonts/TestGVAREight.ttf
test/shape/data/text-rendering-tests/fonts/TestGVAREight.ttf
Copyright: 1992-2017, Thomas A. Rickner
License: Apache-2.0
Comment: License mismatch resolved: https://github.com/harfbuzz/harfbuzz/issues/4062
Files: test/api/fonts/chromacheck-*.ttf
Copyright:
Copyright (c) 2018 Roel Nieskens, https://pixelambacht.nl
Copyright (c) 2018 Google LLC
License: Expat
Files: test/api/fonts/RanaKufi-Regular.subset.otf
Copyright: Khaled Hosny
Comment:
test/api/fonts/README:
RanaKufi-Regular.subset.otf is from https://github.com/alif-type/rana-kufi/ but
the subset is licensed for us in MIT for the project use.
License: Expat
Files: test/api/fonts/TestGVAROne.ttf
test/api/fonts/TestGVARThree.ttf
test/api/fonts/TestGVARTwo.ttf
test/shape/data/text-rendering-tests/fonts/TestGVAROne.ttf
test/shape/data/text-rendering-tests/fonts/TestGVARThree.ttf
test/shape/data/text-rendering-tests/fonts/TestGVARTwo.ttf
Copyright: 2016, Monotype Hong Kong Ltd. and Monotype Imaging Inc
License: Monotype
Files: test/shape/data/in-house/fonts/074a5ae6b19de8f29772fdd5df2d3d833f81f5e6.ttf
test/shape/data/in-house/fonts/1a3d8f381387dd29be1e897e4b5100ac8b4829e1.ttf
test/shape/data/in-house/fonts/b151cfcdaa77585d77f17a42158e0873fc8e2633.ttf
test/shape/data/in-house/fonts/d9b8bc10985f24796826c29f7ccba3d0ae11ec02.ttf
Copyright: 2017, David Corbett
License: CC0-1.0
Files: test/shape/data/in-house/fonts/b722a7d09e60421f3efbc706ad348ab47b88567b.ttf
Copyright: 2005, Mihail Bayaryn
Copyright (c) 2003 by Bitstream, Inc. All Rights Reserved.
Comment:
Chandas font is released under GNU General Public License.
Full license text is available at http://www.gnu.org/copyleft/gpl.html.
Latin and Cyrillic glyphs were added from DejaVu font and modified according to GPL.
License: GPL-3+ and Bitstream-Vera
Files: test/shape/data/in-house/fonts/b895f8ff06493cc893ec44de380690ca0074edfa.ttf
Copyright: 2009-2010, Yoram Gnat (yoram.gnat@gmail.com)
2003-2007, Ralph Hancock & John Hudson
License: GPL-2+ with Font exception
Files: test/shape/data/in-house/fonts/DFONT.dfont
test/shape/data/in-house/fonts/TTC.ttc
Copyright: 2015, FontTools
License: MIT
Comment: https://github.com/fonttools/fonttools/blob/main/LICENSE
License: Apache-2.0
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
.
http://www.apache.org/licenses/LICENSE-2.0
.
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
.
On Debian systems, the full text of the Apache License
can be found in the file `/usr/share/common-licenses/Apache-2.0'.
License: CC0-1.0
On Debian systems, the text of the CC0 1.0 Universal license can be
found in ‘/usr/share/common-licenses/CC0-1.0’.
License: GPL-2+ with Font exception
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
.
On Debian systems, the complete text of the GNU General Public
License, version 2 can be found in "/usr/share/common-licenses/GPL-2".
.
As a special exception, if you create a document which uses this font,
and embed this font or unaltered portions of this font into the
document, this font does not by itself cause the resulting document
to be covered by the GNU General Public License. This exception does
not however invalidate any other reasons why the document might be
covered by the GNU General Public License. If you modify this font,
you may extend this exception to your version of the font, but you
are not obligated to do so. If you do not wish to do so, delete this
exception statement from your version.
License: GPL-3+
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or (at
your option) any later version.
.
This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
General Public License for more details.
.
On Debian systems, the complete text of the GNU General Public
License, version 3 can be found in "/usr/share/common-licenses/GPL-3".
License: ISC
Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.
.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
License: HPND-sell-variant
* Permission to use, copy, modify, distribute, and sell this software and its
* documentation for any purpose is hereby granted without fee, provided that
* the above copyright notice appear in all copies and that both that
* copyright notice and this permission notice appear in supporting
* documentation, and that the name of the author(s) not be used in
* advertising or publicity pertaining to distribution of the software without
* specific, written prior permission. The authors make no
* representations about the suitability of this software for any purpose. It
* is provided "as is" without express or implied warranty.
*
* THE AUTHOR(S) DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
* INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
* EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY SPECIAL, INDIRECT OR
* CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
* DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
* TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
* PERFORMANCE OF THIS SOFTWARE.
License: Expat
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
.
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE
License: MIT
Permission is hereby granted, without written agreement and without license or
royalty fees, to use, copy, modify, and distribute this software and its
documentation for any purpose, provided that the above copyright notice and
the following two paragraphs appear in all copies of this software.
.
IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE TO ANY PARTY FOR DIRECT,
INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE
OF THIS SOFTWARE AND ITS DOCUMENTATION, EVEN IF THE COPYRIGHT HOLDER HAS BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.
THE COPYRIGHT HOLDER SPECIFICALLY DISCLAIMS ANY WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE. THE SOFTWARE PROVIDED HEREUNDER IS ON AN "AS IS" BASIS,
AND THE COPYRIGHT HOLDER HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT,
UPDATES, ENHANCEMENTS, OR MODIFICATIONS.
License: OFL-1.1
SIL OPEN FONT LICENSE
.
Version 1.1 - 26 February 2007
.
PREAMBLE
The goals of the Open Font License (OFL) are to stimulate worldwide
development of collaborative font projects, to support the font creation
efforts of academic and linguistic communities, and to provide a free and
open framework in which fonts may be shared and improved in partnership
with others.
.
The OFL allows the licensed fonts to be used, studied, modified and
redistributed freely as long as they are not sold by themselves. The
fonts, including any derivative works, can be bundled, embedded,
redistributed and/or sold with any software provided that any reserved
names are not used by derivative works. The fonts and derivatives,
however, cannot be released under any other type of license. The
requirement for fonts to remain under this license does not apply
to any document created using the fonts or their derivatives.
.
DEFINITIONS
"Font Software" refers to the set of files released by the Copyright
Holder(s) under this license and clearly marked as such. This may
include source files, build scripts and documentation.
.
"Reserved Font Name" refers to any names specified as such after the
copyright statement(s).
.
"Original Version" refers to the collection of Font Software components as
distributed by the Copyright Holder(s).
.
"Modified Version" refers to any derivative made by adding to, deleting,
or substituting - in part or in whole - any of the components of the
Original Version, by changing formats or by porting the Font Software to a
new environment.
.
"Author" refers to any designer, engineer, programmer, technical
writer or other person who contributed to the Font Software.
.
PERMISSION & CONDITIONS
Permission is hereby granted, free of charge, to any person obtaining
a copy of the Font Software, to use, study, copy, merge, embed, modify,
redistribute, and sell modified and unmodified copies of the Font
Software, subject to the following conditions:
.
1) Neither the Font Software nor any of its individual components,
in Original or Modified Versions, may be sold by itself.
.
2) Original or Modified Versions of the Font Software may be bundled,
redistributed and/or sold with any software, provided that each copy
contains the above copyright notice and this license. These can be
included either as stand-alone text files, human-readable headers or
in the appropriate machine-readable metadata fields within text or
binary files as long as those fields can be easily viewed by the user.
.
3) No Modified Version of the Font Software may use the Reserved Font
Name(s) unless explicit written permission is granted by the corresponding
Copyright Holder. This restriction only applies to the primary font name as
presented to the users.
.
4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
Software shall not be used to promote, endorse or advertise any
Modified Version, except to acknowledge the contribution(s) of the
Copyright Holder(s) and the Author(s) or with their explicit written
permission.
.
5) The Font Software, modified or unmodified, in part or in whole,
must be distributed entirely under this license, and must not be
distributed under any other license. The requirement for fonts to
remain under this license does not apply to any document created
using the Font Software.
.
TERMINATION
This license becomes null and void if any of the above conditions are
not met.
.
DISCLAIMER
THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
OTHER DEALINGS IN THE FONT SOFTWARE.
License: Monotype
This font software is the property of Monotype Imaging Inc., one of its
affiliated entities, or its licensors (collectively, Monotype) and its use
by you is covered under the terms of a license agreement.
.
You have obtained this font software either directly from Monotype or from the
Unicode Consortium. Monotype has granted the Consortium and recipients of the
this font distributed by the Consortium, permission, free of charge, to use,
copy modify, publish, distribute, sublicense, and/or sell copies of the font,
and to permit persons to whom the font is distributed to do so. In addition,
Monotype grants to the Consortium the worldwide, nonexclusive, royalty-free,
paid-up, and irrevocable rights under Monotype's copyright rights to
reproduce, publicly display, publicly perform, prepare derivative works of,
and distribute copies of the font, and the right to sublicense others who
legally receive copies of the font.
.
You can learn more about Monotype here: www.monotype.com
License: Unicode
Permission is hereby granted, free of charge, to any person obtaining
a copy of the Unicode data files and any associated documentation
(the "Data Files") or Unicode software and any associated documentation
(the "Software") to deal in the Data Files or Software
without restriction, including without limitation the rights to use,
copy, modify, merge, publish, distribute, and/or sell copies of
the Data Files or Software, and to permit persons to whom the Data Files
or Software are furnished to do so, provided that either
(a) this copyright and permission notice appear with all copies
of the Data Files or Software, or
(b) this copyright and permission notice appear in associated
Documentation.
.
THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF
ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT OF THIRD PARTY RIGHTS.
IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS
NOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL
DAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THE DATA FILES OR SOFTWARE.
.
Except as contained in this notice, the name of a copyright holder
shall not be used in advertising or otherwise to promote the sale,
use or other dealings in these Data Files or Software without prior
written authorization of the copyright holder.
License: Bitstream-Vera
Permission is hereby granted, free of charge, to any person obtaining a
copy of the fonts accompanying this license ("Fonts") and associated
documentation files (the "Font Software"), to reproduce and distribute
the Font Software, including without limitation the rights to use, copy,
merge, publish, distribute, and/or sell copies of the Font Software, and
to permit persons to whom the Font Software is furnished to do so,
subject to the following conditions:
.
The above copyright and trademark notices and this permission notice
shall be included in all copies of one or more of the Font Software
typefaces.
.
The Font Software may be modified, altered, or added to, and in
particular the designs of glyphs or characters in the Fonts may be
modified and additional glyphs or characters may be added to the Fonts,
only if the fonts are renamed to names not containing either the words
"Bitstream" or the word "Vera".
.
This License becomes null and void to the extent applicable to Fonts or
Font Software that has been modified and is distributed under the
"Bitstream Vera" names.
.
The Font Software may be sold as part of a larger software package but
no copy of one or more of the Font Software typefaces may be sold by
itself.
.
THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL
BITSTREAM OR THE GNOME FOUNDATION BE LIABLE FOR ANY CLAIM, DAMAGES OR
OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL,
OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR
OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT
SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE.
.
Except as contained in this notice, the names of Gnome, the Gnome
Foundation, and Bitstream Inc., shall not be used in advertising or
otherwise to promote the sale, use or other dealings in this Font
Software without prior written authorization from the Gnome Foundation
or Bitstream Inc., respectively. For further information, contact:
<fonts@gnome.org>.
DFSG Assistant LLM REVIEW 0 blocker, 1 important, 2 minor
This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.
Reviewed 2 days ago.
Report
DFSG NEW review for harfbuzz version 14.2.1+ds-1
Summary
- Licensing is DFSG-compliant and
debian/copyrightis accurate: No - Packaging is of good quality: Yes
- Issues: 0 blocker, 1 important, 2 minor
- debian/watch: version 5
- debian/copyright: machine-readable
- Scan before the review: 491 found (451 not listed by the scan, so not checked)
Licensing
The source is DFSG-free: HarfBuzz itself is under the Old-MIT licence, and every file under a different term (ISC, HPND, SGI-OpenGL, BSD-3-clause, Expat, Unicode, OFL-1.1, Monotype, and GPL-2+/GPL-3+ for two test fonts) carries a free, compatible licence whose full text is in the file, and the non-free material is repacked out (perf/texts, xkcd.png, the non-free Ubuntu font and the glyph_names outputs derived from it are in Files-Excluded, absent from both the tree and the orig tarball, and fonts-ubuntu is in Debian's non-free component anyway). debian/copyright is DEP-5 and otherwise matches the tree, but its font stanzas are inaccurate: Roboto test fonts are declared OFL-1.1 although Roboto is Apache-2.0, and the holders of several fonts the stanzas cover (e.g. Cantarell) are not named.
Packaging
Well-structured packaging: compat 13 with dh and the meson buildsystem, two build directories so the udeb is built without graphite2/chafa and takes its library out of build-udeb, hardening and -z defs, symbols files for all seven libraries including the three new ones, DEP-3 patch headers, an autopkgtest that compiles and runs a program against the installed headers/pkg-config file, upstream metadata and salsa CI. Only two minor defects: the meson Build-Depends floor is below the version upstream requires, and the debian/* copyright stanza omits the author of this upload's patches.
Issues
1. [important] [licensing] debian/copyright gives the Roboto test fonts OFL-1.1 although Roboto is Apache-2.0, and names no holder for Cantarell
- Files:
debian/copyright:140-162,debian/copyright:180-204,debian/copyright:210-221,test/api/fonts/Roboto-Regular.abc.ttf,test/fuzzing/fonts/Roboto-Variable.ABC.ttf,test/subset/data/fonts/Roboto-Regular.abc.ttf,test/api/fonts/Cantarell.A.otf - Basis: inferred from what was read, not seen directly
- Evidence: The font stanza
Files: perf/fonts/... test/api/fonts/* test/fuzzing/fonts/* test/shape/data/text-rendering-tests/fonts/*ends inLicense: OFL-1.1, andFiles: test/subset/data/*is OFL-1.1 too. The same file already declares Roboto Apache-2.0:Files: perf/fonts/Roboto-Regular.ttf ... test/subset/data/fonts/Roboto-Regular.ttf ... test/subset/data/fonts/Roboto-Variable.ttfCopyright: 2010-2013, Google CorporationLicense: Apache-2.0. Debian's reference copyright agrees:/usr/share/doc/fonts-roboto-fontface/copyrighthasCopyright: (c) 2013-2015, Christian Robertson ... License: Apache-2, and/usr/share/doc/fonts-cantarell/copyrighthasCopyright: 2009-2019, The Cantarell AuthorsLicense: OFL-1.1— a holder that appears nowhere in debian/copyright, thoughtest/api/fonts/Cantarell.A.otfandtest/subset/data/fonts/Cantarell-VF-ABC.otfare covered by the OFL stanzas. - Problem: The OFL stanzas are wider than the fonts they cover. The ~30
test/api/fonts/Roboto-Regular.*andRoboto-Variable.abc.*files,test/fuzzing/fonts/Roboto-Variable.ABC.ttfand the remainingtest/subset/data/fonts/Roboto*files are Roboto derivatives, i.e. Apache-2.0, but are described as OFL-1.1, which adds reserved-font-name and relicensing restrictions the font is not under; the copyright holder for Roboto is not named. Conversely the Copyright fields of the OFL stanzas list only some of the fonts they cover, leaving holders such as The Cantarell Authors unattributed. No DFSG problem (both licences are free), but debian/copyright does not accurately describe these files, and a third party relying on it gets the wrong terms. - Fix: Put the Roboto files under the Apache-2.0 stanza (e.g. add
test/api/fonts/Roboto-*,test/fuzzing/fonts/Roboto-*andtest/subset/data/fonts/Roboto*) and name Christian Robertson there; add the missing holders, at least The Cantarell Authors and the authors of the other named fonts the OFL stanzas sweep in, to those Copyright fields.
2. [minor] [packaging] Build-Depends allows meson 0.55 but upstream's meson.build requires meson >= 0.60.0
- Files:
debian/control,meson.build:2 - Basis: checked, in the package or with a reference tool
- Evidence: debian/control Build-Depends has
meson (>= 0.55),; meson.build line 2 hasmeson_version: '>= 0.60.0',(and upstream already callscpp.get_supported_link_arguments()at line 65, added in 0.60). - Problem: With meson 0.55-0.59 the build stops in project() before anything is compiled, so the declared build dependency does not describe what the package needs (Policy 7.5: Build-Depends must be sufficient to build and run the package's tests). The archive has meson 1.12, so upload builds are unaffected.
- Fix: Raise the floor to
meson (>= 0.60.0).
3. [minor] [packaging] Files: debian/* names only Ahmed El-Mahmoudy, not Bastian Germann who wrote this upload's patches
- Files:
debian/copyright:37-39,debian/patches/hide-std-template-symbols.patch,debian/patches/Skip-Excluded-Files.patch - Basis: checked, in the package or with a reference tool
- Evidence:
Files: debian/*/Copyright: 2012-2019,2023,2025-2026, أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy@users.sourceforge.net>; both patches beginFrom: Bastian Germann <bage@debian.org>, and the changelog credits him with the two patches and the d/copyright changes of 14.2.1+ds-1. - Problem: The stanza covers everything under debian/ but not the author of the two patches and of the copyright/changelog edits added in this upload; the year range it gives (2025-2026) shows it is meant to track debian/ contributors, so the stanza is now incomplete.
- Fix: Add
Bastian Germann <bage@debian.org>(with 2026) to the Copyright field of the debian/* stanza.
Verified
- Inventory: read all of debian/ (control, rules, changelog head, copyright, all .install/.symbols/.links, clean, gbp.conf, source/format, tests/control and tests/build, upstream/metadata, gitlab-ci.yml, lintian overrides, patches/series and both patches) and the .dsc; sampled upstream by directory (src/, util/, perf/, docs/, test/, subprojects/).
- Scan's 491 unrecognised binaries are test fonts and fuzz corpus, not built code: Hash-named and clusterfuzz-named files under test/fuzzing/fonts/ (about 250, including
9d443b16c88210b09001790d1f047f3bb017655d.susbset-seedand the listedclusterfuzz-testcase-*), test/shape/data/in-house/fonts/ (about 190 hash-named .ttf), plus the named fonts in test/api/fonts/ (includingclusterfuzz-testcase-minimized-hb-shape-fuzzer-5753845452636160), test/shape/data/{aots,text-rendering-tests}/fonts/, test/subset/data/fonts/, perf/fonts/ and test/shape/data/in-house/fonts/{DFONT.dfont,TTC.ttc}. They are covered by the font stanzas of debian/copyright; none were opened. The one corpus file outside a fonts/ directory,test/fuzzing/clusterfuzz-testcase-minimized-hb-subset-fuzzer-6461128124465152, is a fuzz input and falls to Files: *. - Files-Excluded matches the shipped source:
perf/texts/en-words.txt,xkcd.png,test/subset/data/fonts/Ubuntu-Regular.ttfand the glyph_names expected data are absent from both the unpacked tree and harfbuzz_14.2.1+ds.orig.tar.xz. Excluding the Ubuntu font is justified:fonts-ubuntuis in Debian's non-free/fonts section (apt-cache). - Non-font licence evidence matches the stanzas: src/ms-use/COPYING is Microsoft Expat; util/hb-fc-list.c is the Keith Packard HPND-sell text; src/hb-ucd.cc is ISC (Grigori Goronzy); src/hb-cairo-utils.cc Red Hat/Black Foundry; util/gpu/trackball.hh SGI (1993/94); util/gpu/matrix4x4.hh BSD-3 (Mozilla/Google); src/hb-gpu-fragment.glsl and its generated -glsl.hh carry Behdad Esfahbod 2026 + Eric Lengyel 2017 under the Old-MIT text (the .hlsl/.msl/.wgsl ports are Behdad only, correctly under Files: *); src/hb-unicode-emoji-table.hh carries Unicode Inc. 2025 and the Unicode licence. Full licence texts are present for every short name not in /usr/share/common-licenses, and no non-free wording (NC/ND, no-modification, field of use) exists anywhere in the tree.
- All text-file copyright holders are represented: a scan for Copyright/© notices across src/, util/, perf/, test/ and docs/ found only holders already in debian/copyright; the prescan's one loose hit ("Unicode®, Inc." at src/hb-unicode-emoji-table.hh:10) is the trademark line of the emoji-data input quoted in the file header, and the holder is in the stanza at debian/copyright:127-129.
- Generated files have their generator (and input where upstream ships it): src/hb-gpu--glsl.hh etc. from the .glsl/.hlsl/.msl/.wgsl files by gen-gpu-shader-artifacts.py; util/gpu/default-font.hh from util/gpu/default-font.ttf by hexify; util/gpu/default-text.hh from default-text.txt by gen-default-texts.py; hb-ucd-table.hh, hb-unicode-emoji-table.hh and hb-ot-tag-table.hh by src/gen-*.py from Unicode/IANA data that upstream does not ship. No compiled objects, bytecode, archives, PDFs or minified code are in the tree.
- The images are source assets, not builds: HarfBuzz.png, docs/HarfBuzz.png, docs/HarfBuzz.svg, docs/favicon.ico, docs/hb-*.png and the expected SVGs under test/vector/data/expected/; they fall under Files: * (Old-MIT) and were not opened.
- Patches: both have From/Date/Subject headers and are applied (series). Skip-Excluded-Files.patch drops the glyph_names subset test (its expected data is excluded) and the shape_threads test, whose source test/threads/hb-shape-threads.cc reads perf/texts/*, also excluded — both removals are justified, though the header does not say so.
- Udeb: build-udeb is configured/built separately, and libharfbuzz0-udeb.install takes
build-udeb/src/libharfbuzz.so.*[0-9]; dh_install looks in the current (source) directory before debian/tmp (man dh_install), so no udeb install step is missing, and dh_makeshlibs --add-udeb provides its shlibs entry. - Libraries: seven sonames, each with a package, .install and .symbols; libharfbuzz0b.symbols has no hb_raster_/hb_vector_/hb_gpu_/hb_subset_/hb_cairo_/hb_icu_ entries after the split, and the three new files mark their symbols @Base 14.2.1 with Build-Depends-Package. libharfbuzz-dev depends on every library it ships headers and .so symlinks for, and Provides ${gir:Provides} is what dh_girepository sets for the package shipping HarfBuzz-0.0.gir.
- Standards-Version 4.7.4 against Policy 4.7.4.1: current (first two components match). Version/distribution (14.2.1+ds-1 to experimental for a new upstream with three new binary packages), Vcs-*, Homepage and upstream/metadata are consistent.
- autopkgtest: tests/build compiles and runs a program with gcc and pkg-config against libharfbuzz-dev, with build-essential and pkgconf in Depends; Restrictions: superficial, as the check is a local compile.
- uscan found upstream releases with
debian/watch; a newer upstream version is available (upstream15.0.0, packaged14.2.1+ds), which is not a fault of the package. - Every pointer of
debian/copyrightto /usr/share/common-licenses names a file that is there (Apache-2.0,CC0-1.0,GPL-2,GPL-3).
Not confirmed
- Whether the embedded name-table licences of the other fonts in test/api/fonts, test/fuzzing/fonts, test/shape/data/in-house/fonts and test/subset/data/fonts match their stanzas. The fonts are binary and were not opened; Roboto and Cantarell are the cases where Debian's own font packages contradict the file, and no holder is named for Handjet, Foldit, Kalnia, Playwrite, Sixtyfour, Recursive, Muli, Caudex, SreeKrushnadevaraya, Twemoji or Selawik.
- Whether libharfbuzz-vector, -raster and -gpu, which the patch does not give the hb.map version script it adds to libharfbuzz and libharfbuzz-subset, also export C++ template instantiations; if they do, dh_makeshlibs with DPKG_GENSYMBOLS_CHECK_LEVEL=4 would fail against the new .symbols files. A build would show the exported symbol set.
- Whether every API added in 14.2.1 is present in the seven .symbols files; without a build the full exported set cannot be compared.
Proposed changes
None.
Uploader's response to the LLM review
In my opinion, the exclusion of DFSG-non-free material and addition of missing licenses is an improvement for the package. There might still be work to do in terms of license compliance, which I am going to address (Roboto, maybe others) in coming versions (v15 is current). The old version in the archive starts to hurt, so I would appreciate if this can pass soon.
— Bastian Germann (bage), 2 days ago
Review Information
accepted — allocated to awm 2 days ago, started 2 days ago, completed 2 days ago.
Final Comment
Hi,
Not sure why the LLM thinks Roboto is Apache 2.0 I can see clearly that it is SIL OFL 1.1 https://fonts.google.com/specimen/Roboto/license I guess refusing it internet access does cause it issues sometimes :-)
And complaining you're not taking the credit? Well, I guess you can decide that for yourself!
Thanks!
Other Reviews of this Package
| Version | Hash | Allocated | Completed | Reviewer | Status | Details |
|---|---|---|---|---|---|---|
| 14.2.1+ds-1 | a5965479… | 2026-10-27 21:30 | 2026-10-27 21:30 | dfsg-uploader | rejected | VIEW |
| 14.2.1+ds-1 | a485e236… | 2026-10-27 23:56 | 2026-10-27 23:56 | dfsg-uploader | rejected | VIEW |
| 13.2.1-1 | d8c1ac89… | 2026-10-15 04:57 | 2026-10-15 05:54 | awm | rejected | VIEW |