$ git clone -n https://gitee.com/ali-inspur/attr.git /var/lib/mock/dist-an23-build-588512-98701/root/chroot_tmpdir/scmroot/attr
Cloning into '/var/lib/mock/dist-an23-build-588512-98701/root/chroot_tmpdir/scmroot/attr'...
$ git fetch origin 4f1a6c91fc093608896c9846b4c2d7cbbadb741e:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/attr
 * [new ref]         4f1a6c91fc093608896c9846b4c2d7cbbadb741e -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 4f1a6c9 [CVE][Upstream] Update to 2.6.0 to fix CVE-2026-54371
$ wget -O attr-2.6.0.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/attr-2.6.0.tar.xz.c0516a99377b4938eeb7fb2699247e82
--2026-10-21 20:22:40--  http://build.openanolis.cn/kojifiles/upstream-source/attr-2.6.0.tar.xz.c0516a99377b4938eeb7fb2699247e82
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 343608 (336K) [application/x-xz]
Saving to: ‘attr-2.6.0.tar.xz’

     0K .......... .......... .......... .......... .......... 14% 18.4M 0s
    50K .......... .......... .......... .......... .......... 29% 37.1M 0s
   100K .......... .......... .......... .......... .......... 44% 18.9M 0s
   150K .......... .......... .......... .......... .......... 59% 37.0M 0s
   200K .......... .......... .......... .......... .......... 74% 19.0M 0s
   250K .......... .......... .......... .......... .......... 89% 37.0M 0s
   300K .......... .......... .......... .....                100% 27.2M=0.01s

2026-10-21 20:22:40 (25.1 MB/s) - ‘attr-2.6.0.tar.xz’ saved [343608/343608]