$ git clone -n https://gitee.com/tomcruiseqi/libXpm.git /var/lib/mock/dist-an23-build-583637-96466/root/chroot_tmpdir/scmroot/libXpm
Cloning into '/var/lib/mock/dist-an23-build-583637-96466/root/chroot_tmpdir/scmroot/libXpm'...
$ git fetch origin afd11c5393c3e3785e1a7111d7ff38a0c3a2f7ff:KOJI_FETCH_HEAD
From https://gitee.com/tomcruiseqi/libXpm
 * [new ref]         afd11c5393c3e3785e1a7111d7ff38a0c3a2f7ff -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at afd11c5 [CVE][Upstream] Add patch to fix CVE-2026-94287
$ wget -O libXpm-3.5.17.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/libXpm-3.5.17.tar.xz.05b5667aadd476d77e9b5ba1a1de213e
--2026-09-29 15:27:51--  http://build.openanolis.cn/kojifiles/upstream-source/libXpm-3.5.17.tar.xz.05b5667aadd476d77e9b5ba1a1de213e
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 468964 (458K) [application/x-xz]
Saving to: ‘libXpm-3.5.17.tar.xz’

     0K .......... .......... .......... .......... .......... 10% 18.1M 0s
    50K .......... .......... .......... .......... .......... 21% 34.6M 0s
   100K .......... .......... .......... .......... .......... 32% 19.1M 0s
   150K .......... .......... .......... .......... .......... 43% 35.9M 0s
   200K .......... .......... .......... .......... .......... 54% 18.8M 0s
   250K .......... .......... .......... .......... .......... 65% 34.9M 0s
   300K .......... .......... .......... .......... .......... 76% 36.1M 0s
   350K .......... .......... .......... .......... .......... 87% 35.9M 0s
   400K .......... .......... .......... .......... .......... 98% 37.6M 0s
   450K .......                                               100% 7.87M=0.02s

2026-09-29 15:27:51 (26.3 MB/s) - ‘libXpm-3.5.17.tar.xz’ saved [468964/468964]