Backport security fix for CVE-2026-22693 (fix RHBZ#2429288)

Source: Fedora 43: HarfBuzz Important Null Pointer Fix CVE-2026-22693