$ git clone -n https://gitee.com/ali-inspur/attr.git /var/lib/mock/dist-an23-build-561677-91279/root/chroot_tmpdir/scmroot/attr
Cloning into '/var/lib/mock/dist-an23-build-561677-91279/root/chroot_tmpdir/scmroot/attr'...
$ git reset --hard cd38f60aeb6c2954d9ed323085a5b204a4a4588c
HEAD is now at cd38f60 [CVE][upstream] FIX CVE-2026-54371
$ wget -O attr-2.5.1.tar.xz http://build.openanolis.cn/kojifiles/upstream-source/attr-2.5.1.tar.xz.e459262266bbd82b3dd348fc8cc68a6d
--2026-08-05 19:23:20--  http://build.openanolis.cn/kojifiles/upstream-source/attr-2.5.1.tar.xz.e459262266bbd82b3dd348fc8cc68a6d
Resolving build.openanolis.cn (build.openanolis.cn)... 172.16.0.137
Connecting to build.openanolis.cn (build.openanolis.cn)|172.16.0.137|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 318188 (311K) [application/x-xz]
Saving to: ‘attr-2.5.1.tar.xz’

     0K .......... .......... .......... .......... .......... 16%  148M 0s
    50K .......... .......... .......... .......... .......... 32%  102M 0s
   100K .......... .......... .......... .......... .......... 48%  112M 0s
   150K .......... .......... .......... .......... .......... 64%  152M 0s
   200K .......... .......... .......... .......... .......... 80% 79.1M 0s
   250K .......... .......... .......... .......... .......... 96%  120M 0s
   300K ..........                                            100%  147M=0.003s

2026-08-05 19:23:20 (114 MB/s) - ‘attr-2.5.1.tar.xz’ saved [318188/318188]