$ git clone -n https://gitee.com/pang-qing/apache-commons-compress.git /var/lib/mock/dist-an23-build-python3.11-385429-71833/root/chroot_tmpdir/scmroot/apache-commons-compress
Cloning into '/var/lib/mock/dist-an23-build-python3.11-385429-71833/root/chroot_tmpdir/scmroot/apache-commons-compress'...
$ git fetch origin 6f2abe70108c7efb86c3b394eb47afc2c7cc6203:KOJI_FETCH_HEAD
From https://gitee.com/pang-qing/apache-commons-compress
 * [new ref]         6f2abe70108c7efb86c3b394eb47afc2c7cc6203 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 6f2abe7 CVE-2024-25710 and CVE-2024-26308