$ git clone -n https://gitee.com/ali-inspur/tftp.git /var/lib/mock/dist-an23-build-588899-98753/root/chroot_tmpdir/scmroot/tftp
Cloning into '/var/lib/mock/dist-an23-build-588899-98753/root/chroot_tmpdir/scmroot/tftp'...
$ git fetch origin 8940501f675c0b858939613cce2c97a0ecd9fb2f:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/tftp
 * [new ref]         8940501f675c0b858939613cce2c97a0ecd9fb2f -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 8940501 [CVE][Upstream] Update to 5.4 to fix CVE-2026-85234
$ wget -O tftp-hpa-5.4.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/tftp-hpa-5.4.tar.xz.e3f6d00fc3ac18b332258ee364274149
--2026-10-22 17:30:19--  http://build.openanolis.cn/kojifiles/upstream-source/tftp-hpa-5.4.tar.xz.e3f6d00fc3ac18b332258ee364274149
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 133928 (131K) [application/x-xz]
Saving to: ‘tftp-hpa-5.4.tar.xz’

     0K .......... .......... .......... .......... .......... 38% 19.2M 0s
    50K .......... .......... .......... .......... .......... 76% 35.7M 0s
   100K .......... .......... ..........                      100% 24.0M=0.005s

2026-10-22 17:30:19 (24.7 MB/s) - ‘tftp-hpa-5.4.tar.xz’ saved [133928/133928]