$ git clone -n https://gitee.com/ali-inspur/attr.git /var/lib/mock/dist-an23-build-588713-98733/root/chroot_tmpdir/scmroot/attr
Cloning into '/var/lib/mock/dist-an23-build-588713-98733/root/chroot_tmpdir/scmroot/attr'...
$ git fetch origin 957f31b8945072796cf9afc2b8583639fb15ba69:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/attr
 * [new ref]         957f31b8945072796cf9afc2b8583639fb15ba69 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 957f31b [CVE][Upstream] Update to 2.6.0 to fix CVE-2026-54371
$ wget -O attr-2.6.0.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/attr-2.6.0.tar.xz.c0516a99377b4938eeb7fb2699247e82
--2026-10-22 14:17:29--  http://build.openanolis.cn/kojifiles/upstream-source/attr-2.6.0.tar.xz.c0516a99377b4938eeb7fb2699247e82
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 343608 (336K) [application/x-xz]
Saving to: ‘attr-2.6.0.tar.xz’

     0K .......... .......... .......... .......... .......... 14% 16.2M 0s
    50K .......... .......... .......... .......... .......... 29% 31.6M 0s
   100K .......... .......... .......... .......... .......... 44% 16.3M 0s
   150K .......... .......... .......... .......... .......... 59% 32.6M 0s
   200K .......... .......... .......... .......... .......... 74% 16.4M 0s
   250K .......... .......... .......... .......... .......... 89% 32.1M 0s
   300K .......... .......... .......... .....                100% 23.6M=0.02s

2026-10-22 14:17:29 (21.8 MB/s) - ‘attr-2.6.0.tar.xz’ saved [343608/343608]