File CVE-2022-40897-ReDos.patch of Package saltbundlepy-setuptools

Index: setuptools-57.4.0/setuptools/package_index.py
===================================================================
--- setuptools-57.4.0.orig/setuptools/package_index.py
+++ setuptools-57.4.0/setuptools/package_index.py
@@ -197,7 +197,7 @@ def unique_values(func):
     return wrapper
 
 
-REL = re.compile(r"""<([^>]*\srel\s*=\s*['"]?([^'">]+)[^>]*)>""", re.I)
+REL = re.compile(r"""<([^>]*\srel\s{0,10}=\s{0,10}['"]?([^'" >]+)[^>]*)>""", re.I)
 # this line is here to fix emacs' cruddy broken syntax highlighting
 
 
openSUSE Build Service is sponsored by