$ git clone -n https://gitee.com/tomcruiseqi/libXpm.git /var/lib/mock/dist-an23.5-build-583630-96465/root/chroot_tmpdir/scmroot/libXpm
Cloning into '/var/lib/mock/dist-an23.5-build-583630-96465/root/chroot_tmpdir/scmroot/libXpm'...
$ git fetch origin c649f55a2df42a17d3aa1c81739717b0920021ee:KOJI_FETCH_HEAD
From https://gitee.com/tomcruiseqi/libXpm
 * [new ref]         c649f55a2df42a17d3aa1c81739717b0920021ee -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at c649f55 [CVE][Upstream] Add patch to fix CVE-2026-94287
$ wget -O libXpm-3.5.17.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/libXpm-3.5.17.tar.xz.05b5667aadd476d77e9b5ba1a1de213e
--2026-09-29 15:27:35--  http://build.openanolis.cn/kojifiles/upstream-source/libXpm-3.5.17.tar.xz.05b5667aadd476d77e9b5ba1a1de213e
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 468964 (458K) [application/x-xz]
Saving to: ‘libXpm-3.5.17.tar.xz’

     0K .......... .......... .......... .......... .......... 10% 17.9M 0s
    50K .......... .......... .......... .......... .......... 21% 30.9M 0s
   100K .......... .......... .......... .......... .......... 32% 18.5M 0s
   150K .......... .......... .......... .......... .......... 43% 36.8M 0s
   200K .......... .......... .......... .......... .......... 54% 18.6M 0s
   250K .......... .......... .......... .......... .......... 65% 36.8M 0s
   300K .......... .......... .......... .......... .......... 76% 35.7M 0s
   350K .......... .......... .......... .......... .......... 87% 37.0M 0s
   400K .......... .......... .......... .......... .......... 98% 36.3M 0s
   450K .......                                               100% 9.10M=0.02s

2026-09-29 15:27:35 (26.1 MB/s) - ‘libXpm-3.5.17.tar.xz’ saved [468964/468964]