$ git clone -n https://gitee.com/ali-inspur/libXpm.git /var/lib/mock/dist-an23.5-build-548715-88035/root/chroot_tmpdir/scmroot/libXpm
Cloning into '/var/lib/mock/dist-an23.5-build-548715-88035/root/chroot_tmpdir/scmroot/libXpm'...
$ git fetch origin 14cfe5a681cbc447ad1aee0724a1a81affc53c90:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/libXpm
 * [new ref]         14cfe5a681cbc447ad1aee0724a1a81affc53c90 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 14cfe5a [CVE][upstream] FIX CVE-2026-4367