File wheel_cve_2022_40898.patch of Package python-wheel.37748
--- wheel/install.py.orig
+++ wheel/install.py
@@ -32,8 +32,9 @@ VERSION_TOO_HIGH = (1, 0)
# Non-greedy matching of an optional build number may be too clever (more
# invalid wheel filenames will match). Separate regex for .dist-info?
WHEEL_INFO_RE = re.compile(
- r"""^(?P<namever>(?P<name>.+?)(-(?P<ver>\d.+?))?)
- ((-(?P<build>\d.*?))?-(?P<pyver>.+?)-(?P<abi>.+?)-(?P<plat>.+?)
+ r"""^(?P<namever>(?P<name>[^\s-]+?)(-(?P<ver>\d[^\s-]+?))?)
+ ((-(?P<build>\d[^\s-]*?))?-(?P<pyver>[^\s-]+?)-(?P<abi>[^\s-]+?)
+ -(?P<plat>\S+?)
\.whl|\.dist-info)$""",
re.VERBOSE).match