$ git clone -n https://gitee.com/geliwei/python-pillow.git /var/lib/mock/dist-an23-build-550718-88897/root/chroot_tmpdir/scmroot/python-pillow Cloning into '/var/lib/mock/dist-an23-build-550718-88897/root/chroot_tmpdir/scmroot/python-pillow'... $ git fetch origin acaa0c1abf188cc5304ab1c1f4f3f624df856f38:KOJI_FETCH_HEAD From https://gitee.com/geliwei/python-pillow * [new ref] acaa0c1abf188cc5304ab1c1f4f3f624df856f38 -> KOJI_FETCH_HEAD $ git reset --hard KOJI_FETCH_HEAD HEAD is now at acaa0c1 fix: CVE-2026-54060 Add decompression bomb check in PcfFontFile._load_metrics