- up to 2.5.3; SECURITY FIX for http://savannah.nongnu.org/bugs/?41697; enable harfbuzz for better autohinting