DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: harfbuzz 14.2.1+ds-1

Package Information

DescriptionOpenType text shaping engine (shared library)

HarfBuzz is an implementation of the OpenType Layout engine (aka layout engine) and the script-specific logic (aka shaping engine).

This package contains the shared libraries.

MaintainerDebian freedesktop.org maintainers <pkg-freedesktop-maintainers@lists.alioth.debian.org>
Changed ByBastian Germann <bage@debian.org>
Sponsorbage@debian.org
Distributionexperimental
Architectureany all
VCSgit: https://salsa.debian.org/freedesktop-team/harfbuzz.git (browse)
Closes#1131351, #1151016
Popcon Installs207032
Binary NEWYes (new binary packages of a source already in sid)
Trackerhttps://tracker.debian.org/pkg/harfbuzz
Uploaded4 days ago

New Package Report

.changes◂
Changed-ByBastian Germann <bage@debian.org>
Architecturesource amd64 all
Distributionexperimental
DateTue, 27 Oct 2026 13:00:32 +0100
Sourceharfbuzz
Version14.2.1+ds-1
Changelog◂
harfbuzz (14.2.1+ds-1) experimental; urgency=medium
 .
   * Team upload
   * Team-maintain according to the Vcs fields
   * New upstream release (Closes: #1131351)
   * Move from freedesktop to GitHub
   * Exclude Ubuntu Font (Closes: #1151016)
   * Hide internal C++ template instantiation symbols
   * d/copyright: Add missing info, exclude more files
 .
   [ أحمد المحمودي (Ahmed El-Mahmoudy) ]
   * Add libharfbuzz-{vector,raster,gpu}0 binary packages
   * Update symbols
   * d/t/control: change pkg-config dep to pkgconf
   * d/control: add libpng-dev & zlib1g-dev to build-deps
   * d/control: bump standards version to 4.7.4
.dsc◂
Sectionintrospection
Priorityoptional
Componentmain
Package-Listgir1.2-harfbuzz-0.0 deb introspection optional arch=any
libharfbuzz-bin deb utils optional arch=any
libharfbuzz-cairo0 deb libs optional arch=any
libharfbuzz-dev deb libdevel optional arch=any
libharfbuzz-doc deb doc optional arch=all
libharfbuzz-gobject0 deb libs optional arch=any
libharfbuzz-gpu0 deb libs optional arch=any
libharfbuzz-icu0 deb libs optional arch=any
libharfbuzz-raster0 deb libs optional arch=any
libharfbuzz-subset0 deb libs optional arch=any
libharfbuzz-vector0 deb libs optional arch=any
libharfbuzz0-udeb udeb debian-installer optional arch=any
libharfbuzz0b deb libs optional arch=any
debian/copyright◂
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: HarfBuzz
Upstream-Contact: Behdad Esfahbod
Source: https://github.com/harfbuzz/harfbuzz
Files-Excluded:
 perf/texts
 test/subset/data/expected/glyph_names/*
 test/subset/data/fonts/Ubuntu-Regular.ttf
 xkcd.png
Comment:
 Exclude non-DFSG-free files.

Files: *
Copyright: 2018-2020, Adobe, Inc
           2005-2024, Behdad Esfahbod
           2007, Chris Wilson
           2011, Codethink Limited
           2005, David Turner
           1998-2004, David Turner and Werner Lemberg
           2015-2020, Ebrahim Byagowi
           2016, Elie Roux
           2019-2020, Facebook, Inc
           2010-2024, Google, Inc
           2016, Igalia S.L
           2009, Keith Stribley
           2018-2021, Khaled Hosny
           2011, Martin Hosken and SIL International
           2022, Matthias Clasen
           2012-2015, Mozilla Foundation
           2008-2010, Nokia Corporation and/or its subsidiary(-ies)
           1998-2023, Red Hat, Inc
           2013-2015, Alexei Podtelezhnikov
           2012 Zilong Tan <eric.zltan@gmail.com>
           2024 David Corbett
License: MIT

Files: debian/*
Copyright: 2012-2019,2023,2025-2026, أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy@users.sourceforge.net>
License: MIT

Files: src/ms-use/*
Copyright: (c) Microsoft Corporation.
License: Expat

Files: src/hb-gpu-fragment*glsl*
Copyright:
 Copyright (C) 2026  Behdad Esfahbod
 Copyright (C) 2017  Eric Lengyel
License: Expat

Files: src/hb-cairo-utils.cc
Copyright: © 2022  Red Hat, Inc
 Copyright © 2021, 2022  Black Foundry
License: MIT

Files: util/gpu/matrix4x4.hh
Copyright:
 Copyright (c) 2009, Mozilla Corp
 Copyright (c) 2012, Google, Inc.
 All rights reserved.
License: BSD-3-clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
     * Redistributions of source code must retain the above copyright
       notice, this list of conditions and the following disclaimer.
     * Redistributions in binary form must reproduce the above copyright
       notice, this list of conditions and the following disclaimer in the
       documentation and/or other materials provided with the distribution.
     * Neither the name of the <organization> nor the
       names of its contributors may be used to endorse or promote products
       derived from this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY <copyright holder> ''AS IS'' AND ANY
 EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 DISCLAIMED. IN NO EVENT SHALL <copyright holder> BE LIABLE FOR ANY
 DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
 ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Files: util/gpu/trackball.hh
Copyright:
 (c) Copyright 1993, 1994, Silicon Graphics, Inc.
 ALL RIGHTS RESERVED
License: SGI-OpenGL
 Permission to use, copy, modify, and distribute this software for
 any purpose and without fee is hereby granted, provided that the above
 copyright notice appear in all copies and that both the copyright notice
 and this permission notice appear in supporting documentation, and that
 the name of Silicon Graphics, Inc. not be used in advertising
 or publicity pertaining to distribution of the software without specific,
 written prior permission.
 .
 THE MATERIAL EMBODIED ON THIS SOFTWARE IS PROVIDED TO YOU "AS-IS"
 AND WITHOUT WARRANTY OF ANY KIND, EXPRESS, IMPLIED OR OTHERWISE,
 INCLUDING WITHOUT LIMITATION, ANY WARRANTY OF MERCHANTABILITY OR
 FITNESS FOR A PARTICULAR PURPOSE.  IN NO EVENT SHALL SILICON
 GRAPHICS, INC.  BE LIABLE TO YOU OR ANYONE ELSE FOR ANY DIRECT,
 SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY
 KIND, OR ANY DAMAGES WHATSOEVER, INCLUDING WITHOUT LIMITATION,
 LOSS OF PROFIT, LOSS OF USE, SAVINGS OR REVENUE, OR THE CLAIMS OF
 THIRD PARTIES, WHETHER OR NOT SILICON GRAPHICS, INC.  HAS BEEN
 ADVISED OF THE POSSIBILITY OF SUCH LOSS, HOWEVER CAUSED AND ON
 ANY THEORY OF LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE
 POSSESSION, USE OR PERFORMANCE OF THIS SOFTWARE.
 .
 US Government Users Restricted Rights
 Use, duplication, or disclosure by the Government is subject to
 restrictions set forth in FAR 52.227.19(c)(2) or subparagraph
 (c)(1)(ii) of the Rights in Technical Data and Computer Software
 clause at DFARS 252.227-7013 and/or in similar or successor
 clauses in the FAR or the DOD or NASA FAR Supplement.
 Unpublished-- rights reserved under the copyright laws of the
 United States.  Contractor/manufacturer is Silicon Graphics,
 Inc., 2011 N.  Shoreline Blvd., Mountain View, CA 94039-7311.
 .
 OpenGL(TM) is a trademark of Silicon Graphics, Inc.

Files: util/hb-fc-list.c
Copyright: © 2002 Keith Packard
 Copyright © 2014  Google, Inc.
License: X11

Files: src/hb-unicode-emoji-table.hh
Copyright: 2024, Unicode®, Inc
License: Unicode
Comment: https://www.unicode.org/terms_of_use.html

Files: src/hb-ucd.cc
Copyright: 2012, Grigori Goronzy <greg@kinoho.net>
License: ISC

Files: test/shape/data/text-rendering-tests/*
Copyright: 2016, Unicode Inc
License: Apache-2.0

Files: perf/fonts/Amiri-Regular.ttf
       perf/fonts/NotoNastaliqUrdu-Regular.ttf
       perf/fonts/NotoSansDuployan-Regular.otf
       test/api/fonts/*
       test/fuzzing/fonts/*
       test/shape/data/text-rendering-tests/fonts/*
Copyright: 2002-2018, Adobe Systems Incorporated
           2017-2019, Amin Abedi (@aminabedi68)-www.fontamin.com
           2015, Cadson Demak <info@cadsondemak.com>
           2011-2020, Google Inc
           2016, Igalia S.L. (http://igalia.com/)
           2017, Jens Kutilek
           2010-2017, Khaled Hosny <khaledhosny@eglug.org>
           2016, Sascha Brawer
           2010, Sebastian Kosch <sebastian@aldusleaf.org>
           2008, The Bungee Project Authors <david@djr.com>
           1993-2016, The Font Bureau, Inc
           2016, The M+ Project Authors
           2021, The Qahiri Project Authors (github.com/aliftype/qahiri)
           2016-2019, Unicode, Inc
License: OFL-1.1

Files: test/shape/data/in-house/fonts/*
Copyright: 2000-2016, Adobe Systems Incorporated
           2016, Alfredo Marco Pradil
           2018-2022, David Corbett
           2010-2022, Google, Inc
           2011-2012, Lohit Fonts Project contributors <https://pagure.io/lohit>
           2013-2020, Microsoft Corporation
           2018, SIL International (http://scripts.sil.org)
           2010-2021, The Amiri Project Authors (https://github.com/aliftype/amiri)
           2015-2021, The Mada Project Authors
           2021, The Qahiri Project Authors (github.com/aliftype/qahiri)
           2021, The Raqq Project Authors (github.com/aliftype/raqq)
           2018, Unicode, Inc
           2005, Zawgyi.net & Alpha Mandalay
License: OFL-1.1

Files: test/subset/data/*
Copyright: 2002-2018, Adobe Systems Incorporated (http://www.adobe.com/)
           2012, Andhrapradesh Society for Knowledge Networks (fonts.siliconandhra.org)
           2013, Danh Hong (khmertype.org)
           2007, Denis Moyogo Jacquerye <moyogo@gmail.com>
           2011-2012, George W. Nuss (http://www.fulbefouta.com)
           2010-2016, Google Inc
           2011, Hjort Nidudsson
           2019, Inter IKEA Systems B.V. (www.ikea.com)
           2010, NHN Corporation
           2011-2012, Sorkin Type Co (www.sorkintype.com)
           2013, The Alegreya Sans Project Authors (https://github.com/huertatipografica/Alegreya-Sans)
           2010-2020, The Amiri Project Authors (https://github.com/alif-type/amiri)
           2008, The Bungee Project Authors <david@djr.com>
           2007-2008, The C&MA Guinea Fulbe Team
           2011, The Comfortaa Project Authors (https://github.com/alexeiva/comfortaa)
           2020, The Fraunces Project Authors (github.com/undercasetype/Fraunces)
           2016, The M+ Project Authors
           2021, The M+ FONTS Project Authors (https://github.com/coz-m/MPLUS_FONTS)
           2019, The Noto Project Authors (github. com/googlei18n/noto-fonts)
           2017, The Roboto Flex Project Authors (https://github.com/TypeNetwork/Roboto-Flex)
           2004-2020, SIL International (http://www.sil.org)
           2017, The Spectral Project Authors (http://github.com/productiontype/spectral)
           2001-2021, The STIX Fonts Project Authors (https://github.com/stipub/stixfonts)
License: OFL-1.1

Files: test/shape/data/aots/*
Copyright: 2000-2016, Adobe Systems Incorporated
License: Apache-2.0

Files: perf/fonts/Roboto-Regular.ttf
       test/api/fonts/nameID.origin.ttf
       test/api/fonts/nameID.override.expected.ttf
       test/api/fonts/OpenSans-Regular.ttf
       test/shape/data/text-rendering-tests/fonts/TestShapeKndaV3.ttf
       test/subset/data/fonts/Tinos-Italic.ttf
       test/subset/data/fonts/IndicTestHowrah-Regular.ttf
       test/subset/data/fonts/IndicTestJalandhar-Regular.ttf
       test/subset/data/fonts/Roboto-Regular.ttf
       test/subset/data/fonts/Roboto-Variable.ttf
Copyright: 2010-2013, Google Corporation
License: Apache-2.0

Files: test/shape/data/in-house/fonts/e8691822f6a705e3e9fb48a0405c645b1a036590.ttf
Copyright: 2020, Fredrick R. Brennan
License: Apache-2.0

Files: test/subset/data/fonts/Khmer.ttf
Copyright: 2013, Danh Hong (khmertype.org)
License: Apache-2.0

Files: test/api/fonts/TestGVAREight.ttf
       test/shape/data/text-rendering-tests/fonts/TestGVAREight.ttf
Copyright: 1992-2017, Thomas A. Rickner
License: Apache-2.0
Comment: License mismatch resolved: https://github.com/harfbuzz/harfbuzz/issues/4062

Files: test/api/fonts/chromacheck-*.ttf
Copyright:
 Copyright (c) 2018 Roel Nieskens, https://pixelambacht.nl
 Copyright (c) 2018 Google LLC
License: Expat

Files: test/api/fonts/RanaKufi-Regular.subset.otf
Copyright: Khaled Hosny
Comment:
 test/api/fonts/README:
 RanaKufi-Regular.subset.otf is from https://github.com/alif-type/rana-kufi/ but
 the subset is licensed for us in MIT for the project use.
License: Expat

Files: test/api/fonts/TestGVAROne.ttf
       test/api/fonts/TestGVARThree.ttf
       test/api/fonts/TestGVARTwo.ttf
       test/shape/data/text-rendering-tests/fonts/TestGVAROne.ttf
       test/shape/data/text-rendering-tests/fonts/TestGVARThree.ttf
       test/shape/data/text-rendering-tests/fonts/TestGVARTwo.ttf
Copyright: 2016, Monotype Hong Kong Ltd. and Monotype Imaging Inc
License: Monotype

Files: test/shape/data/in-house/fonts/074a5ae6b19de8f29772fdd5df2d3d833f81f5e6.ttf
       test/shape/data/in-house/fonts/1a3d8f381387dd29be1e897e4b5100ac8b4829e1.ttf
       test/shape/data/in-house/fonts/b151cfcdaa77585d77f17a42158e0873fc8e2633.ttf
       test/shape/data/in-house/fonts/d9b8bc10985f24796826c29f7ccba3d0ae11ec02.ttf
Copyright: 2017, David Corbett
License: CC0-1.0

Files: test/shape/data/in-house/fonts/b722a7d09e60421f3efbc706ad348ab47b88567b.ttf
Copyright: 2005, Mihail Bayaryn
License: GPL-3+

Files: test/shape/data/in-house/fonts/b895f8ff06493cc893ec44de380690ca0074edfa.ttf
Copyright: 2009-2010, Yoram Gnat (yoram.gnat@gmail.com)
           2003-2007, Ralph Hancock & John Hudson
License: GPL-2+ with Font exception

Files: test/shape/data/in-house/fonts/DFONT.dfont
       test/shape/data/in-house/fonts/TTC.ttc
Copyright: 2015, FontTools
License: MIT
Comment: https://github.com/fonttools/fonttools/blob/main/LICENSE

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
  http://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 .
 On Debian systems, the full text of the Apache License
 can be found in the file `/usr/share/common-licenses/Apache-2.0'.

License: CC0-1.0
 On Debian systems, the text of the CC0 1.0 Universal license can be
 found in ‘/usr/share/common-licenses/CC0-1.0’.

License: GPL-2+ with Font exception
 This program is free software; you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation; either version 2 of the License, or
 (at your option) any later version.
 .
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
 .
 On Debian systems, the complete text of the GNU General Public
 License, version 2 can be found in "/usr/share/common-licenses/GPL-2".
 .
 As a special exception, if you create a document which uses this font,
 and embed this font or unaltered portions of this font into the
 document, this font does not by itself cause the resulting document
 to be covered by the GNU General Public License. This exception does
 not however invalidate any other reasons why the document might be
 covered by the GNU General Public License. If you modify this font,
 you may extend this exception to your version of the font, but you
 are not obligated to do so. If you do not wish to do so, delete this
 exception statement from your version.

License: GPL-3+
 This program is free software; you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation; either version 3 of the License, or (at
 your option) any later version.
 .
 This program is distributed in the hope that it will be useful, but
 WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 General Public License for more details.
 .
 On Debian systems, the complete text of the GNU General Public
 License, version 3 can be found in "/usr/share/common-licenses/GPL-3".

License: ISC
 Permission to use, copy, modify, and/or distribute this software for any
 purpose with or without fee is hereby granted, provided that the above
 copyright notice and this permission notice appear in all copies.
 .
 THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

License: X11
 * Permission to use, copy, modify, distribute, and sell this software and its
 * documentation for any purpose is hereby granted without fee, provided that
 * the above copyright notice appear in all copies and that both that
 * copyright notice and this permission notice appear in supporting
 * documentation, and that the name of the author(s) not be used in
 * advertising or publicity pertaining to distribution of the software without
 * specific, written prior permission.  The authors make no
 * representations about the suitability of this software for any purpose.  It
 * is provided "as is" without express or implied warranty.
 *
 * THE AUTHOR(S) DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
 * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
 * EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY SPECIAL, INDIRECT OR
 * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
 * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
 * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 * PERFORMANCE OF THIS SOFTWARE.

License: Expat
    Permission is hereby granted, free of charge, to any person obtaining a copy
    of this software and associated documentation files (the "Software"), to deal
    in the Software without restriction, including without limitation the rights
    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    copies of the Software, and to permit persons to whom the Software is
    furnished to do so, subject to the following conditions:
 .
    The above copyright notice and this permission notice shall be included in all
    copies or substantial portions of the Software.
 .
    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
    SOFTWARE

License: MIT
 Permission is hereby granted, without written agreement and without license or
 royalty fees, to use, copy, modify, and distribute this software and its
 documentation for any purpose, provided that the above copyright notice and
 the following two paragraphs appear in all copies of this software.
 .
 IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE TO ANY PARTY FOR DIRECT,
 INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE
 OF THIS SOFTWARE AND ITS DOCUMENTATION, EVEN IF THE COPYRIGHT HOLDER HAS BEEN
 ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .
 THE COPYRIGHT HOLDER SPECIFICALLY DISCLAIMS ANY WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
 PARTICULAR PURPOSE.  THE SOFTWARE PROVIDED HEREUNDER IS ON AN "AS IS" BASIS,
 AND THE COPYRIGHT HOLDER HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT,
 UPDATES, ENHANCEMENTS, OR MODIFICATIONS.

License: OFL-1.1
 SIL OPEN FONT LICENSE
 .
 Version 1.1 - 26 February 2007
 .
 PREAMBLE
 The goals of the Open Font License (OFL) are to stimulate worldwide
 development of collaborative font projects, to support the font creation
 efforts of academic and linguistic communities, and to provide a free and
 open framework in which fonts may be shared and improved in partnership
 with others.
 .
 The OFL allows the licensed fonts to be used, studied, modified and
 redistributed freely as long as they are not sold by themselves. The
 fonts, including any derivative works, can be bundled, embedded,
 redistributed and/or sold with any software provided that any reserved
 names are not used by derivative works. The fonts and derivatives,
 however, cannot be released under any other type of license. The
 requirement for fonts to remain under this license does not apply
 to any document created using the fonts or their derivatives.
 .
 DEFINITIONS
 "Font Software" refers to the set of files released by the Copyright
 Holder(s) under this license and clearly marked as such. This may
 include source files, build scripts and documentation.
 .
 "Reserved Font Name" refers to any names specified as such after the
 copyright statement(s).
 .
 "Original Version" refers to the collection of Font Software components as
 distributed by the Copyright Holder(s).
 .
 "Modified Version" refers to any derivative made by adding to, deleting,
 or substituting - in part or in whole - any of the components of the
 Original Version, by changing formats or by porting the Font Software to a
 new environment.
 .
 "Author" refers to any designer, engineer, programmer, technical
 writer or other person who contributed to the Font Software.
 .
 PERMISSION & CONDITIONS
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of the Font Software, to use, study, copy, merge, embed, modify,
 redistribute, and sell modified and unmodified copies of the Font
 Software, subject to the following conditions:
 .
 1) Neither the Font Software nor any of its individual components,
 in Original or Modified Versions, may be sold by itself.
 .
 2) Original or Modified Versions of the Font Software may be bundled,
 redistributed and/or sold with any software, provided that each copy
 contains the above copyright notice and this license. These can be
 included either as stand-alone text files, human-readable headers or
 in the appropriate machine-readable metadata fields within text or
 binary files as long as those fields can be easily viewed by the user.
 .
 3) No Modified Version of the Font Software may use the Reserved Font
 Name(s) unless explicit written permission is granted by the corresponding
 Copyright Holder. This restriction only applies to the primary font name as
 presented to the users.
 .
 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
 Software shall not be used to promote, endorse or advertise any
 Modified Version, except to acknowledge the contribution(s) of the
 Copyright Holder(s) and the Author(s) or with their explicit written
 permission.
 .
 5) The Font Software, modified or unmodified, in part or in whole,
 must be distributed entirely under this license, and must not be
 distributed under any other license. The requirement for fonts to
 remain under this license does not apply to any document created
 using the Font Software.
 .
 TERMINATION
 This license becomes null and void if any of the above conditions are
 not met.
 .
 DISCLAIMER
 THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
 OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
 COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
 INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
 DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
 OTHER DEALINGS IN THE FONT SOFTWARE.

License: Monotype
 This font software is the property of Monotype Imaging Inc., one of its
 affiliated entities, or its licensors (collectively, Monotype) and its use
 by you is covered under the terms of a license agreement.
 .
 You have obtained this font software either directly from Monotype or from the
 Unicode Consortium. Monotype has granted the Consortium and recipients of the
 this font distributed by the Consortium, permission, free of charge, to use,
 copy modify, publish, distribute, sublicense, and/or sell copies of the font,
 and to permit persons to whom the font is distributed to do so. In addition,
 Monotype grants to the Consortium the worldwide, nonexclusive, royalty-free,
 paid-up, and irrevocable rights under Monotype's copyright rights to
 reproduce, publicly display, publicly perform, prepare derivative works of,
 and distribute copies of the font, and the right to sublicense others who
 legally receive copies of the font.
 .
 You can learn more about Monotype here:  www.monotype.com

License: Unicode
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of the Unicode data files and any associated documentation
 (the "Data Files") or Unicode software and any associated documentation
 (the "Software") to deal in the Data Files or Software
 without restriction, including without limitation the rights to use,
 copy, modify, merge, publish, distribute, and/or sell copies of
 the Data Files or Software, and to permit persons to whom the Data Files
 or Software are furnished to do so, provided that either
 (a) this copyright and permission notice appear with all copies
 of the Data Files or Software, or
 (b) this copyright and permission notice appear in associated
 Documentation.
 .
 THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF
 ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
 WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT OF THIRD PARTY RIGHTS.
 IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS
 NOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL
 DAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
 DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
 TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 PERFORMANCE OF THE DATA FILES OR SOFTWARE.
 .
 Except as contained in this notice, the name of a copyright holder
 shall not be used in advertising or otherwise to promote the sale,
 use or other dealings in these Data Files or Software without prior
 written authorization of the copyright holder.

DFSG Assistant LLM REVIEW 1 blocker, 0 important, 4 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 4 days ago.

Proposes a replacement debian/watch: debian/watch in version 5 format

Report◂

DFSG NEW review for harfbuzz version 14.2.1+ds-1

Summary

  • Licensing is DFSG-compliant and debian/copyright is accurate: No
  • Packaging is of good quality: Yes
  • Issues: 1 blocker, 0 important, 4 minor
  • debian/watch: old format (version 4)
  • debian/copyright: machine-readable
  • Scan before the review: 491 found (451 not listed by the scan, so not checked)

Licensing

All licences found in the tree are DFSG-free (Old MIT, Expat, ISC, X11, BSD-3-clause, Apache-2.0, OFL-1.1, CC0, Unicode, SGI-OpenGL, Monotype grant; the non-free Ubuntu font, its expected outputs, the perf texts and xkcd.png are removed by Files-Excluded and are absent). debian/copyright is DEP-5 and the licence texts are complete, but it does not describe every file correctly: perf/fonts/Gulzar-Regular.ttf is not matched by any font stanza and so falls under the catch-all MIT, and src/hb-gpu-fragmentglsl is labelled Expat although its own grant is the Old MIT text that this same file calls MIT.

Packaging

The packaging is in good shape: debhelper compat 13 with meson, hardening=+all, two build dirs (main and udeb), complete and consistent .install/.symbols files for all ten libraries, sane debhelper handling of nocheck, a superficial but valid autopkgtest, DEP-3 patches, and Standards-Version 4.7.4 against Policy 4.7.4.1. Only small defects: libharfbuzz-dev lacks a dependency on libcairo2-dev for the hb-cairo.h it installs, and one package synopsis is a copy-paste error. No policy violation, upgrade breakage or missing dependency was found.

Issues

1. [blocker] [licensing] No Files stanza covers perf/fonts/Gulzar-Regular.ttf, so debian/copyright gives it the catch-all MIT licence

  • Files: debian/copyright:13-35 (Files: *), debian/copyright:140-161, debian/copyright:208-219; perf/fonts/Gulzar-Regular.ttf
  • Basis: checked, in the package or with a reference tool
  • Evidence: perf/fonts/ holds five fonts, but only four are named: the OFL-1.1 stanza lists perf/fonts/Amiri-Regular.ttf, perf/fonts/NotoNastaliqUrdu-Regular.ttf, perf/fonts/NotoSansDuployan-Regular.otf (debian/copyright:140-141) and a later stanza lists perf/fonts/Roboto-Regular.ttf (debian/copyright:208). Gulzar-Regular.ttf (read by perf/benchmark-shape.cc:34,37, mentioned in NEWS) matches no stanza, so the first stanza, Files: * / License: MIT (debian/copyright:13,35), applies to it.
  • Problem: Gulzar is a Google Fonts OFL-1.1 font, not MIT code; describing it as MIT misstates its licence and drops its copyright holder (the font's own stanza is missing, unlike every other font in the tree). That makes debian/copyright inaccurate for a file it is supposed to cover.
  • Fix: Add perf/fonts/Gulzar-Regular.ttf to the OFL-1.1 font stanza (or give it a stanza of its own) with its copyright holder, e.g. 2020, The Gulzar Project Authors.

2. [minor] [licensing] Files: src/hb-gpu-fragmentglsl is declared Expat, but the files carry the Old MIT grant this file calls MIT

  • Files: debian/copyright:45-49; src/hb-gpu-fragment.glsl:1-24; src/hb-gpu-fragment-glsl.hh:2-25
  • Basis: checked, in the package or with a reference tool
  • Evidence: The stanza says License: Expat. Both files open with Copyright (C) 2026 Behdad Esfahbod / Copyright (C) 2017 Eric Lengyel followed by Permission is hereby granted, without written agreement and without license or royalty fees, ... - the text given under the stand-alone License: MIT paragraph (debian/copyright:389), not the License: Expat text at debian/copyright:370.
  • Problem: The short name does not match the licence text in the file; the sibling shader files (src/hb-gpu-vertex.glsl, src/hb-gpu-paint-fragment.glsl) carry the same grant and are left to Files: * / MIT. Both are free, so this does not affect DFSG compliance, but debian/copyright is inaccurate.
  • Fix: Change the stanza's License: field to MIT (the Old MIT text already declared in this file), keeping the two copyright holders.

3. [minor] [packaging] libharfbuzz-dev does not depend on libcairo2-dev although it installs hb-cairo.h, which includes <cairo.h>

  • Files: debian/control (Package: libharfbuzz-dev, Depends), src/hb-cairo.h:32, src/meson.build:947 (install_headers), debian/libharfbuzz-dev.install
  • Basis: checked, in the package or with a reference tool
  • Evidence: install_headers(hb_cairo_headers, subdir: 'harfbuzz') installs hb-cairo.h, and debian/libharfbuzz-dev.install takes all of usr/include/harfbuzz/. The header starts with #include <cairo.h>, which lives in /usr/include/cairo and is put on the include path by cairo.pc. libharfbuzz-dev Depends lists libglib2.0-dev, libgraphite2-dev, libicu-dev, libfreetype-dev but not libcairo2-dev.
  • Problem: Any consumer including hb-cairo.h fails to compile unless they happen to have libcairo2-dev installed for another reason; the harfbuzz-cairo.pc requires: also names only harfbuzz, so it adds no cairo flags.
  • Fix: Add libcairo2-dev to the Depends of libharfbuzz-dev (it is already in Build-Depends).

4. [minor] [packaging] libharfbuzz-gobject0 synopsis calls the GObject bindings an ICU backend

  • Files: debian/control (Package: libharfbuzz-gobject0, Description)
  • Basis: checked, in the package or with a reference tool
  • Evidence: Description: OpenType text shaping engine ICU backend (GObject library), while the long description says the package contains the GObject library, providing wrapper GObject type bindings for all HarfBuzz objects and enums; the ICU backend is libharfbuzz-icu0.
  • Problem: The synopsis shown by apt and package browsers is wrong and duplicates the ICU backend package's wording.
  • Fix: Use e.g. OpenType text shaping engine (GObject library).

5. [minor] [packaging] debian/watch is in the old version 4 format

  • Files: debian/watch
  • Basis: found by the review tooling's own checks
  • Evidence: version=4
  • Problem: Version 5 is the current format of debian/watch.
  • Fix: Convert it to version 5; a mechanical conversion is under Proposed changes.

Verified

  • Files-Excluded paths are absent from the tree: perf/texts, xkcd.png, test/subset/data/fonts/Ubuntu-Regular.ttf and test/subset/data/expected/glyph_names/; after the exclusions only test/subset/data/tests/glyph_names.tests still names the Ubuntu font, and its test is removed from test/subset/meson.build by debian/patches/Skip-Excluded-Files.patch (the other hunk disables shape_threads, whose inputs are the excluded perf/texts/*).
  • Licence files read in full: top-level COPYING (Old MIT, matched by the License: MIT text and by Files: *), test/COPYING (OFL-1.1, matched by the font stanzas), test/shape/data/aots/COPYING (Apache-2.0), test/shape/data/text-rendering-tests/COPYING (Apache-2.0), src/ms-use/COPYING (Expat) - each matches the stanza that claims its directory.
  • File headers checked against stanzas: src/ms-use/* (Microsoft, Expat), src/hb-cairo-utils.cc (Red Hat + Black Foundry, Old MIT - the only file with Black Foundry code; hb-cairo.cc/hb-cairo-utils.hh are Red Hat only), src/hb-ucd.cc (ISC, Grigori Goronzy), src/hb-unicode-emoji-table.hh (Unicode terms; holder is named - only the year, 2025 in the file vs 2024 in the stanza, differs), util/hb-fc-list.c (X11), util/gpu/matrix4x4.hh (BSD-3 text as quoted), util/gpu/trackball.hh (SGI text as quoted), util/gpu/demo-*.cc/.h and util/hb-gpu.cc (HarfBuzz Old MIT or a bare Copyright ... All Rights Reserved. line; no conflicting terms, and they are HarfBuzz code per COPYING and Files: *).
  • Eric Lengyel's Slug notice appears only in src/hb-gpu-fragment.glsl and its generated -glsl.hh; hb-gpu-fragment.wgsl/.msl/.hlsl and the draw/paint/vertex shaders carry only the HarfBuzz grant, so the narrow pattern src/hb-gpu-fragment*glsl* is the correct scope.
  • Prescan binary data accounted for: the ~491 hits are font files (ttf/otf/ttc/dfont) in test/api/fonts/, test/fuzzing/fonts/, test/subset/data/fonts/, test/subset/data/expected/, test/shape/data/{in-house,text-rendering-tests,aots}/fonts/ and perf/fonts/, plus the project images HarfBuzz.png, docs/HarfBuzz.png, docs/hb-gpu.png, docs/hb-raster.png, docs/hb-shape.png, docs/hb-subset.png, docs/HarfBuzz.svg, docs/favicon.ico, util/gpu/default-font.ttf and Qt/DFONT/TTC test fixtures. No built program, object, bytecode, archive or PDF was found; the two clusterfuzz-testcase-* files (test/api/fonts/clusterfuzz-testcase-minimized-hb-shape-fuzzer-5753845452636160, test/fuzzing/clusterfuzz-testcase-minimized-hb-subset-fuzzer-6461128124465152) are truncated/corrupt fonts used as fuzzer regression inputs.
  • Generated files have their generators in the package: src/hb-ucd-table.hh (gen-ucd-table.py, Unicode 17.0.0), src/hb-unicode-emoji-table.hh (gen-emoji-table.py, emoji-data 17.0), src/hb-gpu-*-{glsl,msl,hlsl,wgsl}.hh and util/gpu/demo-*-{glsl,msl,hlsl,wgsl}.hh (gen-gpu-shader-artifacts.py from the shipped .glsl/.msl/.hlsl/.wgsl), and util/gpu/default-text*.hh (gen-default-texts.py); the pre-generated copies in the tarball are reproducible from these inputs.
  • Licences combined in a binary package are compatible: only Old MIT/ISC/X11/BSD/Expat code and the Unicode and SGI permissive grants end up in the libraries; the OFL, Apache-2.0, CC0, GPL-2+-font-exception and GPL-3+ items are fonts and test data that are not installed.
  • debian/copyright is DEP-5 with the canonical Format: URL, so no replacement was proposed; every Files pattern naming a specific file matches an existing path, and /usr/share/common-licenses pointers name Apache-2.0, CC0-1.0, GPL-2 and GPL-3, all present.
  • Packaging files read in full: control, rules, changelog, source/format, clean, gbp.conf, gitlab-ci.yml, upstream/metadata, tests/control, tests/build, all .install, .symbols and .links files, the lintian overrides and both patches. The 10 libraries each have a matching package, .install and .symbols; the udeb takes build-udeb/src/libharfbuzz.so.* and dh_makeshlibs --add-udeb is used; the -vector0/-raster0/-gpu0 symbols are new at 14.2.1 with no stale C++ template symbols.
  • debhelper 13: dh itself skips override_dh_auto_test under nocheck, so the missing in-target check is not a fault, and ${misc:Depends}/${shlibs:Depends}/${gir:Depends} naming is consistent with compat 13.
  • Standards-Version 4.7.4 is current: the installed Policy is 4.7.4.1. The autopkgtest (tests/control: Tests: build, Depends: libharfbuzz-dev, build-essential, pkgconf, Restrictions: superficial) compiles and runs a program via pkg-config --cflags --libs harfbuzz, which matches the installed package.
  • Both patches carry DEP-3 From/Date/Subject headers; hide-std-template-symbols.patch adds src/hb.map and applies it to libharfbuzz and libharfbuzz-subset only, leaving the other libraries' symbols files untouched.
  • uscan found upstream releases with debian/watch; a newer upstream version is available (upstream 15.0.0, packaged 14.2.1+ds), which is not a fault of the package.
  • Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0, CC0-1.0, GPL-2, GPL-3).

Not confirmed

  • util/gpu/default-font.ttf (embedded into hb-gpu via default-font.hh) carries no provenance and no font stanza; it is covered only by the catch-all Files: * MIT. Its real licence and holder could not be determined from the tree, and the binary was not opened.
  • test/api/fonts/* is declared wholly OFL-1.1, but the directory contains obvious derivatives of Roboto and other Apache-2.0 fonts (e.g. test/api/fonts/Roboto-Regular.*.ttf), which debian/copyright elsewhere (test/subset/data/fonts/Roboto-Regular.ttf, perf/fonts/Roboto-Regular.ttf) calls Apache-2.0; splitting that stanza would probably be more accurate, but the fonts themselves were not opened to check their notices.

Proposed: debian/watch in version 5 format

debian/watch is in an old format. This is the conversion made by uscan --update-watchfile, which has not been run against the upstream site: some defaults differ in version 5, so test it with uscan --report before use.

Version: 5

Source: https://api.github.com/repos/@PACKAGE@/@PACKAGE@/releases
Matching-Pattern: https://github.com/@PACKAGE@/@PACKAGE@/releases/download/v?[\d.]+/@PACKAGE@@ANY_VERSION@@ARCHIVE_EXT@
Dversionmangle: auto
Repacksuffix: +ds
Searchmode: plain

Uploader's response to the LLM review

The uploader rejected this upload in response to the review.

Review Information

rejected — allocated to dfsg-uploader 4 days ago, started 4 days ago, completed 4 days ago.

Final Comment

The uploader rejected this upload in response to the automated (LLM) review of it, so that they can fix the problems it found and upload again.

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
14.2.1+ds-1 a5965479… 2026-10-27 21:30 2026-10-27 21:30 dfsg-uploader rejected VIEW
14.2.1+ds-1 040f8bfa… 2026-10-29 08:34 2026-10-29 08:37 awm accepted VIEW
13.2.1-1 d8c1ac89… 2026-10-15 04:57 2026-10-15 05:54 awm rejected VIEW

Back to Dashboard | View all reviews for this package