$ git clone -n https://gitee.com/tomcruiseqi/libXfont2.git /var/lib/mock/dist-an23-build-564235-91816/root/chroot_tmpdir/scmroot/libXfont2
Cloning into '/var/lib/mock/dist-an23-build-564235-91816/root/chroot_tmpdir/scmroot/libXfont2'...
$ git fetch origin a99e64c2e5b59e4164ac03df0a7fe2796ca649e3:KOJI_FETCH_HEAD
From https://gitee.com/tomcruiseqi/libXfont2
 * [new ref]         a99e64c2e5b59e4164ac03df0a7fe2796ca649e3 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at a99e64c [CVE][Upstream] Update to 2.0.9 to fix CVE-2026-59679, CVE-2026-44950
$ wget -O libXfont2-2.0.9.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/libXfont2-2.0.9.tar.xz.134b3f673f6ecd3e67c0e892dd1a89e8
--2026-08-12 06:09:50--  http://build.openanolis.cn/kojifiles/upstream-source/libXfont2-2.0.9.tar.xz.134b3f673f6ecd3e67c0e892dd1a89e8
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 478844 (468K) [application/x-xz]
Saving to: ‘libXfont2-2.0.9.tar.xz’

     0K .......... .......... .......... .......... .......... 10% 18.3M 0s
    50K .......... .......... .......... .......... .......... 21% 31.3M 0s
   100K .......... .......... .......... .......... .......... 32% 18.1M 0s
   150K .......... .......... .......... .......... .......... 42% 34.1M 0s
   200K .......... .......... .......... .......... .......... 53% 20.6M 0s
   250K .......... .......... .......... .......... .......... 64% 32.8M 0s
   300K .......... .......... .......... .......... .......... 74% 30.6M 0s
   350K .......... .......... .......... .......... .......... 85% 37.3M 0s
   400K .......... .......... .......... .......... .......... 96% 36.9M 0s
   450K .......... .......                                    100% 12.4M=0.02s

2026-08-12 06:09:50 (25.6 MB/s) - ‘libXfont2-2.0.9.tar.xz’ saved [478844/478844]