File CVE-2022-40897-ReDos.patch of Package python-setuptools.27371

Index: setuptools-40.5.0/setuptools/package_index.py
===================================================================
--- setuptools-40.5.0.orig/setuptools/package_index.py
+++ setuptools-40.5.0/setuptools/package_index.py
@@ -214,7 +214,7 @@ def unique_values(func):
     return wrapper
 
 
-REL = re.compile(r"""<([^>]*\srel\s*=\s*['"]?([^'">]+)[^>]*)>""", re.I)
+REL = re.compile(r"""<([^>]*\srel\s{0,10}=\s{0,10}['"]?([^'" >]+)[^>]*)>""", re.I)
 # this line is here to fix emacs' cruddy broken syntax highlighting
 
 
openSUSE Build Service is sponsored by