Backport security fix for CVE-2026-22693 (fix RHBZ#2429278)

Source: Fedora 42 harfbuzz Critical Fix for Null Pointer CVE-2026-22693