$ git clone -n https://gitee.com/src-anolis-os/bubblewrap.git /var/lib/mock/dist-an8.10-build-588442-98661/root/chroot_tmpdir/scmroot/bubblewrap
Cloning into '/var/lib/mock/dist-an8.10-build-588442-98661/root/chroot_tmpdir/scmroot/bubblewrap'...
$ git fetch origin d46a30b555bc4447638dadde068bf0837188f896:KOJI_FETCH_HEAD
From https://gitee.com/src-anolis-os/bubblewrap
 * [new ref]         d46a30b555bc4447638dadde068bf0837188f896 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at d46a30b [CVE]update to bubblewrap-0.4.0-3 for CVE-2026-87766
$ wget -O bubblewrap-0.4.0.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/bubblewrap-0.4.0.tar.xz.a0f3f2c80a3bad535af5bbd1b502450c
--2026-10-21 19:52:13--  http://build.openanolis.cn/kojifiles/upstream-source/bubblewrap-0.4.0.tar.xz.a0f3f2c80a3bad535af5bbd1b502450c
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 214304 (209K) [application/x-xz]
Saving to: ‘bubblewrap-0.4.0.tar.xz’

     0K .......... .......... .......... .......... .......... 23% 20.9M 0s
    50K .......... .......... .......... .......... .......... 47% 38.9M 0s
   100K .......... .......... .......... .......... .......... 71% 21.2M 0s
   150K .......... .......... .......... .......... .......... 95% 40.4M 0s
   200K .........                                             100% 8.36M=0.008s

2026-10-21 19:52:13 (25.0 MB/s) - ‘bubblewrap-0.4.0.tar.xz’ saved [214304/214304]