$ git clone -n https://gitee.com/ali-inspur/libXfont2.git /var/lib/mock/dist-an23-build-550022-88793/root/chroot_tmpdir/scmroot/libXfont2
Cloning into '/var/lib/mock/dist-an23-build-550022-88793/root/chroot_tmpdir/scmroot/libXfont2'...
$ git fetch origin 27e46e9e2bb209dc0720c08d2579a759936272a0:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/libXfont2
 * [new ref]         27e46e9e2bb209dc0720c08d2579a759936272a0 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 27e46e9 [CVE][upstream] Update 2.0.8 to FIX CVE-2026-56002 CVE-2026-56003
$ wget -O libXfont2-2.0.8.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/libXfont2-2.0.8.tar.xz.52a9b20ba3b74198728f6c1781f9ad36
--2026-07-16 18:14:17--  http://build.openanolis.cn/kojifiles/upstream-source/libXfont2-2.0.8.tar.xz.52a9b20ba3b74198728f6c1781f9ad36
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 474560 (463K) [application/x-xz]
Saving to: ‘libXfont2-2.0.8.tar.xz’

     0K .......... .......... .......... .......... .......... 10% 18.2M 0s
    50K .......... .......... .......... .......... .......... 21% 35.0M 0s
   100K .......... .......... .......... .......... .......... 32% 18.7M 0s
   150K .......... .......... .......... .......... .......... 43% 31.0M 0s
   200K .......... .......... .......... .......... .......... 53% 19.7M 0s
   250K .......... .......... .......... .......... .......... 64% 33.7M 0s
   300K .......... .......... .......... .......... .......... 75% 34.5M 0s
   350K .......... .......... .......... .......... .......... 86% 33.7M 0s
   400K .......... .......... .......... .......... .......... 97% 34.1M 0s
   450K .......... ...                                        100% 11.2M=0.02s

2026-07-16 18:14:17 (25.6 MB/s) - ‘libXfont2-2.0.8.tar.xz’ saved [474560/474560]