These are all security issues fixed in the harfbuzz-devel-6.0.0-2.1 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "libharfbuzz-gobject0-32bit": "6.0.0-2.1", "libharfbuzz-icu0": "6.0.0-2.1", "typelib-1_0-HarfBuzz-0_0": "6.0.0-2.1", "libharfbuzz-subset0": "6.0.0-2.1", "harfbuzz-tools": "6.0.0-2.1", "libharfbuzz-subset0-32bit": "6.0.0-2.1", "libharfbuzz-gobject0": "6.0.0-2.1", "libharfbuzz0-32bit": "6.0.0-2.1", "libharfbuzz-icu0-32bit": "6.0.0-2.1", "harfbuzz-devel": "6.0.0-2.1", "libharfbuzz0": "6.0.0-2.1" } ] }