$ git clone -n https://gitee.com/ali-inspur/attr.git /var/lib/mock/dist-an23.5-build-588714-98732/root/chroot_tmpdir/scmroot/attr
Cloning into '/var/lib/mock/dist-an23.5-build-588714-98732/root/chroot_tmpdir/scmroot/attr'...
$ git fetch origin f77c55846bf6d380e8e6cb19fe5b3c102837729a:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/attr
 * [new ref]         f77c55846bf6d380e8e6cb19fe5b3c102837729a -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at f77c558 [CVE][Upstream] Update to 2.6.0 to fix CVE-2026-54371
$ wget -O attr-2.6.0.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/attr-2.6.0.tar.xz.c0516a99377b4938eeb7fb2699247e82
--2026-10-22 14:17:29--  http://build.openanolis.cn/kojifiles/upstream-source/attr-2.6.0.tar.xz.c0516a99377b4938eeb7fb2699247e82
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 343608 (336K) [application/x-xz]
Saving to: ‘attr-2.6.0.tar.xz’

     0K .......... .......... .......... .......... .......... 14% 19.6M 0s
    50K .......... .......... .......... .......... .......... 29% 37.3M 0s
   100K .......... .......... .......... .......... .......... 44% 19.6M 0s
   150K .......... .......... .......... .......... .......... 59% 37.8M 0s
   200K .......... .......... .......... .......... .......... 74% 19.8M 0s
   250K .......... .......... .......... .......... .......... 89% 38.0M 0s
   300K .......... .......... .......... .....                100% 28.2M=0.01s

2026-10-22 14:17:29 (26.1 MB/s) - ‘attr-2.6.0.tar.xz’ saved [343608/343608]