diff --git a/component/gtk-2/buildout.cfg b/component/gtk-2/buildout.cfg
index c6c988bff9e91b4d57ef748a22621c443d18fd5d..1f83fdc1295e20281f917d9fcc00f17ba41b74bf 100644
--- a/component/gtk-2/buildout.cfg
+++ b/component/gtk-2/buildout.cfg
@@ -41,8 +41,8 @@ environment =
 
 [harfbuzz]
 recipe = slapos.recipe.cmmi
-url = http://www.freedesktop.org/software/harfbuzz/release/harfbuzz-0.9.25.tar.bz2
-md5sum = 491b631239f51dcd4f7934775306c4e7
+url = http://www.freedesktop.org/software/harfbuzz/release/harfbuzz-0.9.28.tar.bz2
+md5sum = accbeb679f39d839038b95a87e40870e
 pkg_config_depends = ${cairo:location}/lib/pkgconfig:${cairo:pkg_config_depends}
 configure-options =
   --disable-static