$ git clone -n https://gitee.com/ali-inspur/libXfont2.git /var/lib/mock/dist-an23-build-550037-88793/root/chroot_tmpdir/scmroot/libXfont2
Cloning into '/var/lib/mock/dist-an23-build-550037-88793/root/chroot_tmpdir/scmroot/libXfont2'...
$ git fetch origin 691e6d96785bb4daf506af56d369cd1f51c41961:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/libXfont2
 * [new ref]         691e6d96785bb4daf506af56d369cd1f51c41961 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 691e6d9 [CVE][upstream] Update 2.0.8 to FIX CVE-2026-56002 CVE-2026-56003
$ wget -O libXfont2-2.0.8.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/libXfont2-2.0.8.tar.xz.52a9b20ba3b74198728f6c1781f9ad36
--2026-07-16 19:05:50--  http://build.openanolis.cn/kojifiles/upstream-source/libXfont2-2.0.8.tar.xz.52a9b20ba3b74198728f6c1781f9ad36
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 474560 (463K) [application/x-xz]
Saving to: ‘libXfont2-2.0.8.tar.xz’

     0K .......... .......... .......... .......... .......... 10% 18.0M 0s
    50K .......... .......... .......... .......... .......... 21% 34.0M 0s
   100K .......... .......... .......... .......... .......... 32% 17.8M 0s
   150K .......... .......... .......... .......... .......... 43% 7.95M 0s
   200K .......... .......... .......... .......... .......... 53% 35.2M 0s
   250K .......... .......... .......... .......... .......... 64% 31.4M 0s
   300K .......... .......... .......... .......... .......... 75% 20.5M 0s
   350K .......... .......... .......... .......... .......... 86% 31.9M 0s
   400K .......... .......... .......... .......... .......... 97% 35.5M 0s
   450K .......... ...                                        100% 61.7M=0.02s

2026-07-16 19:05:50 (21.1 MB/s) - ‘libXfont2-2.0.8.tar.xz’ saved [474560/474560]