File CVE-2022-40897-ReDos.patch of Package python39-setuptools.35206
Index: setuptools-44.1.1/setuptools/package_index.py
===================================================================
--- setuptools-44.1.1.orig/setuptools/package_index.py
+++ setuptools-44.1.1/setuptools/package_index.py
@@ -214,7 +214,7 @@ def unique_values(func):
return wrapper
-REL = re.compile(r"""<([^>]*\srel\s*=\s*['"]?([^'">]+)[^>]*)>""", re.I)
+REL = re.compile(r"""<([^>]*\srel\s{0,10}=\s{0,10}['"]?([^'" >]+)[^>]*)>""", re.I)
# this line is here to fix emacs' cruddy broken syntax highlighting