$ git clone -n https://gitee.com/ali-inspur/tftp.git /var/lib/mock/dist-an23-build-588859-98753/root/chroot_tmpdir/scmroot/tftp
Cloning into '/var/lib/mock/dist-an23-build-588859-98753/root/chroot_tmpdir/scmroot/tftp'...
$ git fetch origin 215cec8063c48b3791ebfffc40f9abc1581ddfd0:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/tftp
 * [new ref]         215cec8063c48b3791ebfffc40f9abc1581ddfd0 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 215cec8 [CVE][Upstream] Update to 5.4 to fix CVE-2026-85234
$ wget -O tftp-hpa-5.4.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/tftp-hpa-5.4.tar.xz.e3f6d00fc3ac18b332258ee364274149
--2026-10-22 16:53:33--  http://build.openanolis.cn/kojifiles/upstream-source/tftp-hpa-5.4.tar.xz.e3f6d00fc3ac18b332258ee364274149
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 133928 (131K) [application/x-xz]
Saving to: ‘tftp-hpa-5.4.tar.xz’

     0K .......... .......... .......... .......... .......... 38% 17.1M 0s
    50K .......... .......... .......... .......... .......... 76% 33.6M 0s
   100K .......... .......... ..........                      100% 20.6M=0.006s

2026-10-22 16:53:33 (22.1 MB/s) - ‘tftp-hpa-5.4.tar.xz’ saved [133928/133928]