$ git clone -n https://gitee.com/tomcruiseqi/libXfont2.git /var/lib/mock/dist-an23.5-build-564236-91815/root/chroot_tmpdir/scmroot/libXfont2
Cloning into '/var/lib/mock/dist-an23.5-build-564236-91815/root/chroot_tmpdir/scmroot/libXfont2'...
$ git fetch origin eab9a9f6c79d383c46f0e7478fd999a6e4d38747:KOJI_FETCH_HEAD
From https://gitee.com/tomcruiseqi/libXfont2
 * [new ref]         eab9a9f6c79d383c46f0e7478fd999a6e4d38747 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at eab9a9f [CVE][Upstream] Update to 2.0.9 to fix CVE-2026-59679, CVE-2026-44950
$ wget -O libXfont2-2.0.9.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/libXfont2-2.0.9.tar.xz.134b3f673f6ecd3e67c0e892dd1a89e8
--2026-08-12 06:09:52--  http://build.openanolis.cn/kojifiles/upstream-source/libXfont2-2.0.9.tar.xz.134b3f673f6ecd3e67c0e892dd1a89e8
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 478844 (468K) [application/x-xz]
Saving to: ‘libXfont2-2.0.9.tar.xz’

     0K .......... .......... .......... .......... .......... 10% 18.0M 0s
    50K .......... .......... .......... .......... .......... 21% 34.4M 0s
   100K .......... .......... .......... .......... .......... 32% 18.5M 0s
   150K .......... .......... .......... .......... .......... 42% 34.1M 0s
   200K .......... .......... .......... .......... .......... 53% 19.5M 0s
   250K .......... .......... .......... .......... .......... 64% 37.0M 0s
   300K .......... .......... .......... .......... .......... 74% 32.5M 0s
   350K .......... .......... .......... .......... .......... 85% 34.5M 0s
   400K .......... .......... .......... .......... .......... 96% 35.7M 0s
   450K .......... .......                                    100% 15.6M=0.02s

2026-08-12 06:09:52 (26.2 MB/s) - ‘libXfont2-2.0.9.tar.xz’ saved [478844/478844]