$ git clone -n https://gitee.com/ali-inspur/tftp.git /var/lib/mock/dist-an23.5-build-588862-98732/root/chroot_tmpdir/scmroot/tftp
Cloning into '/var/lib/mock/dist-an23.5-build-588862-98732/root/chroot_tmpdir/scmroot/tftp'...
$ git fetch origin fe3b13b0fd159bea4296912c42c94cae0485703a:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/tftp
 * [new ref]         fe3b13b0fd159bea4296912c42c94cae0485703a -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at fe3b13b [CVE][Upstream] Update to 5.4 to fix CVE-2026-85234
$ wget -O tftp-hpa-5.4.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/tftp-hpa-5.4.tar.xz.e3f6d00fc3ac18b332258ee364274149
--2026-10-22 16:54:33--  http://build.openanolis.cn/kojifiles/upstream-source/tftp-hpa-5.4.tar.xz.e3f6d00fc3ac18b332258ee364274149
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 133928 (131K) [application/x-xz]
Saving to: ‘tftp-hpa-5.4.tar.xz’

     0K .......... .......... .......... .......... .......... 38% 18.9M 0s
    50K .......... .......... .......... .......... .......... 76% 36.0M 0s
   100K .......... .......... ..........                      100% 23.1M=0.005s

2026-10-22 16:54:33 (24.4 MB/s) - ‘tftp-hpa-5.4.tar.xz’ saved [133928/133928]