I was going to say them same thing about using FontForge or ttx to remove the broken byte code. I don't think reporting upstream is going to be of use, it has been about three years since the last commit and I have a feeling the developers moved on to something else. Still, doesn't hurt to try, especially if we are going to modify the fonts. The other option is to just remove the fonts all together, unless they are necessary for Indic typesetting in SUSE products. I can try to get to modifying the fonts when I have spare time in the evening, but don't hold your breath.