$ git clone -n https://gitee.com/src-anolis-os/container-selinux.git /var/lib/mock/dist-an8.10-build-545735-87292/root/chroot_tmpdir/scmroot/container-selinux
Cloning into '/var/lib/mock/dist-an8.10-build-545735-87292/root/chroot_tmpdir/scmroot/container-selinux'...
$ git fetch origin 14815a589343e265dc3fe0899cc2e36dd87e429c:KOJI_FETCH_HEAD
From https://gitee.com/src-anolis-os/container-selinux
 * [new ref]         14815a589343e265dc3fe0899cc2e36dd87e429c -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 14815a5 [CVE]update to container-selinux-2.229.0-3 for CVE-2026-25679 CVE-2026-32280 CVE-2026-32281 CVE-2026-32283 CVE-2026-34986
$ wget -O v2.229.0.tar.gz http://build.openanolis.cn/kojifiles/upstream-source/v2.229.0.tar.gz.ee17e263d11f9784aca5e69d99df9946
--2026-07-01 19:20:39--  http://build.openanolis.cn/kojifiles/upstream-source/v2.229.0.tar.gz.ee17e263d11f9784aca5e69d99df9946
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 31195 (30K) [application/x-gzip]
Saving to: ‘v2.229.0.tar.gz’

     0K .......... .......... ..........                      100% 20.7M=0.001s

2026-07-01 19:20:39 (20.7 MB/s) - ‘v2.229.0.tar.gz’ saved [31195/31195]