CVE-2022-40897

Advisory

Osxphotos 0.55.3 updates its dependency 'setuptools' to version '65.5.1' to include a security fix.
https://github.com/RhetTbull/osxphotos/pull/836/files

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Fixed

- Performance improvements for `osxphotos export` when used with `--download-missing` or `--sidecar XMP` options. (1086)

Added

Changed

Contributors

- [RhetTbull](https://github.com/RhetTbull) for code changes.
- [MaxLyt](https://github.com/MaxLyt) for finding the issue.

[v0.60.1](https://github.com/RhetTbull/osxphotos/compare/v0.60.0...v0.60.1)

Hot fix for a bug with in-memory database and --dry-run.

14 May 2023

Fixed

- Fixed crash with --dry-run with large export database (1071)

Contributors

- RhetTbull for code changes.
- rajscode for identifying the bug and filing a detailed bug report.

[v0.60.0](https://github.com/RhetTbull/osxphotos/compare/v0.59.3...v0.60.0)

Linux Support: adds support for using a subset of osxphotos capabilities on Linux.

07 May 2023

Added

- osxphotos now supports Linux (tested on Ubuntu 22.04); some commands are macOS only and will not be available (nor shown) on Linux. Huge thank you to [dvdkon](https://github.com/dvdkon) for doing the Linux port!
- Added `PhotoTables` API and `tables` property to `PhotoInfo` to access underlying SQL tables for a photo.

Changed

- Added macOS 13.3 to supported versions table.

Contributors

- dvdkon for Linux port.
- RhetTbull for code changes.
- pekingduck for bug report.
- cclause for updating ruff test runner.

[v0.59.3](https://github.com/RhetTbull/osxphotos/compare/v0.59.2...v0.59.3)

Bug fixes for memory leak, crash during export

10 April 2023

Fixed

- Fixed memory leak in export (1047)
- Fixed crash during export (1046)
- Fixed large crash log size (1048)

Changed

- Added better help for no selection with --selected (1036)
- Changed PhotoInfo.asdict() and PhotoInfo.json() to allow deep or shallow option (1038)
- Updated development docs (1043)

Contributors

- RhetTbull for code changes
- wernerzj for finding bug with memory leak
- rajscode for finding export crash
- oPromessa for development docs fix

[v0.59.2](https://github.com/RhetTbull/osxphotos/compare/v0.59.1...v0.59.2)

Bug Fix for Export

08 April 2023

Fixed

- Fixed error on export when photo belonged to a project (999)
- Fixed large increase in export database size (999)

Changed

- Added indent, shallow args to PhotoInfo.json() (1038)

Contributors

- RhetTbull for code
- oPromessa for finding bugs, running tests

[v0.59.1](https://github.com/RhetTbull/osxphotos/compare/v0.59.0...v0.59.1)

Performance Boost

2 April 2023

Changed

- Removed lock files from export code (speed boost for NAS export, see 999); will need to eventually add this back for multithreaded export
- Optimized some code in export CLI to speed export
- Some linting fixed for move to ruff
-

Contributors

- [RhetTbull](https://github.com/RhetTbull) for code changes.
- [cclauss](https://github.com/cclauss) for linting fixes

[v0.59.0](https://github.com/RhetTbull/osxphotos/compare/v0.58.2...v0.59.0)

1 April 2023

Added

- `PhotoInfo.export()` and `PhotoExporter.export()` now support exporting in concurrent threads on Python 3.11+. This applies only to the API. The `osxphotos export` CLI does not yet support concurrent export. See 999.

See example code in [concurrent_export.py](https://github.com/RhetTbull/osxphotos/blob/main/examples/concurrent_export.py).

Contributors

- [RhetTbull](https://github.com/RhetTbull) for code changes.
- [eecue](https://github.com/eecue) for testing and helping pinpoint the issues.

[v0.58.2](https://github.com/RhetTbull/osxphotos/compare/v0.58.1...v0.58.2)

14 March 2023

Changed

- batch-edit no longer overwrites keywords but instead merges new keywords with existing keywords

Added

- added --replace-keywords flag to `osxphotos batch-edit` to force replacement of keywords

Contributors

- [RhetTbull](https://github.com/RhetTbull) for code changes.
- [pekingduck](https://github.com/pekingduck) for pointing out the deisgn flaw in `batch-edit --keywords` logic

[v0.58.1](https://github.com/RhetTbull/osxphotos/compare/v0.58.0...v0.58.1)

09 March 2023

Fixed

- Null times in Photos database (1014)

Added

- Added appends, prepends filter to template system (1015)
- Added python and macOS versions to --version output (1008)

Contributors

- [RhetTbull](https://github.com/RhetTbull) for code changes.
- [ianmmoir](https://github.com/ianmmoir) for finding null times bug

[v0.58.0](https://github.com/RhetTbull/osxphotos/compare/v0.57.3...v0.58.0)

25 February 2023

Added

- Added `osxphotos batch-edit` command to batch edit metadata (title, description, keywords, location) on selected photos. See `osxphotos help batch-edit` for more information. (949)
- Added `--date-added` and `--date-added-from-photo` to `osxphotos timewarp` command to adjust the date added for selected photos. This is useful for removing photos from the Recents folder, for example. (998)

Fixed

- Bug fix for export when retry failed to close export database. Thanks to [eecue](https://github.com/eecue) for reporting this. (#999)

Contributors

- [RhetTbull](https://github.com/RhetTbull) for code changes.
- [eecue](https://github.com/eecue) for finding export database bug.

[v0.57.3](https://github.com/RhetTbull/osxphotos/compare/v0.57.2...v0.57.3)

20 February 2023

Added `osxphotos show FILEPATH`

Added

- `osxphotos show FILEPATH` to show a photo in Photos from the filepath to an exported photo, exported with `osxphotos export`

Internal

- Fixed a bug in `echo_error()` that occurred only in certain circumstances.

Contributors To This Release

- [RhetTbull](https://github.com/RhetTbull) for code changes.

[v0.57.2](https://github.com/RhetTbull/osxphotos/compare/v0.57.1...v0.57.2)

20 February 2023

Updated exportdb to add migrate library feature

Added

- `--migrate-photos-library` option added to `osxphotos exportdb` to migrate the export database from one Photos library to another. This is useful when moving to a new computer but maintaining the existing osxphotos export. Thanks to swduncan for the idea. (990)

Fixed

- Fixed a bug in `osxphotos export --cleanup` to handle files which could not be deleted. Thanks to oPromessa for finding this and suggesting the fix. (987)

Internal

- Fixed a bug that caused `rich_echo()` to not display rich text if `--verbose` wasn't specified.

Contributors To This Release

- [RhetTbull](https://github.com/RhetTbull) for code changes.
- [Promessa](https://github.com/promessa) who found the cleanup bug and suggested a code fix.
- [swduncan](https://github.com/swduncan) who suggested the library migrate use case.

[v0.57.1](https://github.com/RhetTbull/osxphotos/compare/v0.57.0...v0.57.1)

12 February 2023

Added show command, bug fix, refactoring

A bug fix and some refactoring to prepare for adding a parallel export mode. Also added `osxphotos show` command.

Added

- Implemented show command: `osxphotos show UUID_OR_NAME` finds the photo/album/folder in Photos and spotlights it in the Photos app (964)
- `--uuid-from-file` can now read from stdin if the filename is `-` (965)

Changed

- Added lock files to export to minimize name collisions. This will help with implementing a parallel/multi-process export mode later.

Fixed

- Fixed `osxphotos timewarp` bug if timezone was null in database (976)

Contributors To This Release

- [RhetTbull](https://github.com/RhetTbull)
- [aa599](https://github.com/aa599) for reporting the timezone bug and suggesting change to `--uuid-from-file`

[v0.57.0](https://github.com/RhetTbull/osxphotos/compare/v0.56.7...v0.57.0)

5 February 2023

Bug Fix and Refactoring

This release included a lot of refactoring of the command line code to make it easier to maintain.
No new features were added. Because a lot of the code changed, it's more likely than usual that
some bugs got introduced (or reintroduced) this time so if you encounter any, let me know by
opening an [issue](https://github.com/RhetTbull/osxphotos/issues).

Fixed

- Fixed regression for exporting associated burst images (640)

Changed

- Refactored much of the CLI code to make it more maintainable, specifically those commands that used QUERY_OPTIONS. (602)
- Deprecated `osxphotos dump` (will be removed in a future release); added dump functionality to `osxphotos query` (793)
- Deprecated use of the Photos database argument in favor of the `--db/--library` option. Will be removed in a future release.
- Added query options to `osxphotos debug-dump` (966)
- Refactored --verbose to accept multiple counts. For example, `-VV` or `--verbose --verbose` will increase verbose level. (931)
- QUERY_OPTIONS can exclude options (930)

Added

- Added new [query_command and selection_command decorators](https://github.com/RhetTbull/osxphotos/blob/master/API_README.md#building-simple-command-line-tools)
for building simple command line tools.

Contributors

- RhetTbull

[v0.56.7](https://github.com/RhetTbull/osxphotos/compare/v0.56.6...v0.56.7)

28 January 2023

Bug Fixes and A Few New Features

Added

- Added `--not-edited` option to query | Added corresponding tests for query and export ([oPromessa](https://github.com/oPromessa))
- Implemented `{counter}` template [957](https://github.com/RhetTbull/osxphotos/pull/957) ([RhetTbull](https://github.com/RhetTbull))

Fixed

- Fixed --dry-run with --finder-tags-keywords and --xattr-template, 958

Changed

- Refactored verbose 931

Contributors to this release

- oPromessa for adding `--not-edited`
- pweaver - thanks for finding the bug with `--dry-run` and `--finder-tag-keywords`
- eecue for providing testing data

[v0.56.6](https://github.com/RhetTbull/osxphotos/compare/v0.56.5...v0.56.6)

22 January 2023

TimeWarp Update

Added

- Added --parse-date to timewarp to parse date from filename (and optionally timezone) (867)
- Added `PersonInfo.favorite` and `PersonInfo.feature_less` (940)

Contributors

- Thanks to eecue for the idea of `PersonInfo.feature_less`
- Release files for 0.56.6 [`952`](https://github.com/RhetTbull/osxphotos/pull/952)
- Feature timewarp parse date 867 [`951`](https://github.com/RhetTbull/osxphotos/pull/951)
- Feature person favorite 940 [`950`](https://github.com/RhetTbull/osxphotos/pull/950)

[v0.56.5](https://github.com/RhetTbull/osxphotos/compare/v0.56.4...v0.56.5)

21 January 2023

Hotfix for osxphotos timewarp

Fixed

- Fixed iCloud sync for `osxphotos timewarp --timezone`

[v0.56.4](https://github.com/RhetTbull/osxphotos/compare/v0.56.3...v0.56.4)

21 January 2023

Speed up for import and better search info in Ventura

Added

- `osxphotos inspect` now shows all search info for selected photo (934)
- Added PhotoInfo.SearchInfo.source to show source of photo (e.g. Messages, Instagram, ...) (937)

Fixed

- Fixed incorrect SearchInfo categories for Ventura

Contributors

- Thanks to djbeadle for idea of adding SearchInfo.source
- Thanks for oPromessa for testing `import` speed-ups and providing test data

[v0.56.3](https://github.com/RhetTbull/osxphotos/compare/v0.56.2...v0.56.3)

16 January 2023

add-locations command

Added

- Added new `osxphotos add-locations` command to add missing locations to photos. Thanks to eecue for the inspiration!

Fixed

- Fixed bug in `osxphotos sync` command to filter shared photos, which cannot be synced

[v0.56.2](https://github.com/RhetTbull/osxphotos/compare/v0.56.1...v0.56.2)

15 January 2023

Various Enhancements

Added

- Added score info to inspect, 899

Changed

- Updated PhotoScript version to use faster folder/album code

Fixed

- Fixed 'Photos 5 only' in help text
- Added note on `pipx ensurepath` to README.md
- On import consider GPS Location from XMP if EXIF is not available

Contributors to this release

- RhetTbull - Added AI scores to `osxphotos inspect`
- mave2k - Documentation fixes
- oPromessa - Bug fix for metadata in `osxphotos import`

[v0.56.1](https://github.com/RhetTbull/osxphotos/compare/v0.56.0...v0.56.1)

14 January 2023

Sync Command

Added

- Added new `osxphotos sync` command to sync metadata between libraries (887)

[v0.56.0](https://github.com/RhetTbull/osxphotos/compare/v0.55.7...v0.56.0)

13 January 2023

Ability to export photos in iCloud / not in iCloud

Added

- Added --incloud, --not-incloud, --not-missing, --cloudasset, --not-cloudasset to export (800)
- Added PhotoInfo.fingerprint (900)

Changed

- Added --profile, --watch, --breakpoint, --debug as global options; previously these worked only with export

New Contributors

- Added oPromessa as a contributor for code
- Added johnsturgeon as a contributor for bug, and doc
- Added qkeddy as a contributor for ideas, and data

[v0.55.7](https://github.com/RhetTbull/osxphotos/compare/v0.55.6...v0.55.7)

1 January 2023

Bug fix for shared photos on Ventura

Fixed

- Fixes path for shared photos on Ventura
- Shared photos can now be exported on Ventura

[v0.55.6](https://github.com/RhetTbull/osxphotos/compare/v0.55.5...v0.55.6)

30 December 2022

Updates for timewarp and export when reading/writing QuickTime dates

Changed

- Added QuickTime:ContentCreateDate as a source for `osxphotos timewarp`
- Write QuickTime:ContentCreateDate when exporting with --exiftool for `osxphotos export`

Contributors

Thanks to PetrochukM for identifying this and providing code!

[v0.55.5](https://github.com/RhetTbull/osxphotos/compare/v0.55.3...v0.55.5)

> 24 December 2022

- Handle "Z" as EXIF offset time [`881`](https://github.com/RhetTbull/osxphotos/pull/881)
- add fmckeogh as a contributor for code, and bug [`882`](https://github.com/RhetTbull/osxphotos/pull/882)
- Version bump for release [`5f29870`](https://github.com/RhetTbull/osxphotos/commit/5f298709d7d87f00d0abf6401a6cb101a7ebe630)

[v0.55.3](https://github.com/RhetTbull/osxphotos/compare/v0.55.2...v0.55.3)

> 19 December 2022

- Release files for 0.55.3 [`879`](https://github.com/RhetTbull/osxphotos/pull/879)
- Partial implementation for 868, candidate paths [`878`](https://github.com/RhetTbull/osxphotos/pull/878)
- Fix for 853, deleted files not in exportdb --report [`877`](https://github.com/RhetTbull/osxphotos/pull/877)
- Fix for 872, duplicate results with --exif (and --name) [`876`](https://github.com/RhetTbull/osxphotos/pull/876)
- fix: dev_requirements.txt to reduce vulnerabilities [`836`](https://github.com/RhetTbull/osxphotos/pull/836)
- Added errors to export database, --update-errors to export, 872 [`874`](https://github.com/RhetTbull/osxphotos/pull/874)
- Bug fix for missing RAW images during export [`8b9af7b`](https://github.com/RhetTbull/osxphotos/commit/8b9af7be6758292b03dc291261636f334ff407a4)
- Release files [`de584e3`](https://github.com/RhetTbull/osxphotos/commit/de584e3dec63025c583910e1fa4b247341b25379)
- Added Ventura 13.1 to support OS versions [`830da7b`](https://github.com/RhetTbull/osxphotos/commit/830da7b3b40c1908c10310c41005fd3cf318cecd)

[v0.55.2](https://github.com/RhetTbull/osxphotos/compare/v0.55.1...v0.55.2)

> 13 December 2022

- Bug edited path bad mojave 859 [`870`](https://github.com/RhetTbull/osxphotos/pull/870)
- Version bump, fix for 859, wrong edited path in Mojave [`aeb6283`](https://github.com/RhetTbull/osxphotos/commit/aeb6283b2bed243be3bb3de8863cb3e40b797140)
- Added template function example [`ee370f5`](https://github.com/RhetTbull/osxphotos/commit/ee370f5dfba78dd4f3a2835aa56e9d1bf2bc1d9a)
- Added timewarp --function example [`2afab9e`](https://github.com/RhetTbull/osxphotos/commit/2afab9e3b16642ed4486c7a2533aeb184b6ec1a1)
- Added edited live video path to inspect, 865 [`3c8d7e1`](https://github.com/RhetTbull/osxphotos/commit/3c8d7e13b92b8db4999e458aac2ce37eb706cc7b)
- Updated README for supported OS versions [`c3bd04f`](https://github.com/RhetTbull/osxphotos/commit/c3bd04f257f8fbdf93034f60342943a3ffbdeb5d)

[v0.55.1](https://github.com/RhetTbull/osxphotos/compare/v0.55.0...v0.55.1)

> 11 December 2022

- Bug edited path bad mojave 859 [`864`](https://github.com/RhetTbull/osxphotos/pull/864)
- Version bump, fix for 859, wrong edited path in Mojave [`e4faf37`](https://github.com/RhetTbull/osxphotos/commit/e4faf3779c6c56982fba909a0efda21b86890b73)
- Update tests.yml [`debc001`](https://github.com/RhetTbull/osxphotos/commit/debc001af9684d04a31836a6fa5705b706eb36f0)
- Fixed edit_resource_id for Photos 5+ [`025ee36`](https://github.com/RhetTbull/osxphotos/commit/025ee36086d1515aa16a0018aaa5ae371a8a332d)

[v0.55.0](https://github.com/RhetTbull/osxphotos/compare/v0.54.4...v0.55.0)

> 11 December 2022

- Added Ventura to list of supported OS [`863`](https://github.com/RhetTbull/osxphotos/pull/863)
- Partial fix for 859, missing path edited on Mojave [`862`](https://github.com/RhetTbull/osxphotos/pull/862)
- add drodner as a contributor for bug, and userTesting [`861`](https://github.com/RhetTbull/osxphotos/pull/861)
- Updated build for Ventura [`327f198`](https://github.com/RhetTbull/osxphotos/commit/327f19809ee0f8883977a27eb547dcc7f9e93e11)
- Added target architecture, 857 [`88e56bc`](https://github.com/RhetTbull/osxphotos/commit/88e56bc0b978d75b606a4adf36fa2d77ef16eb95)

[v0.54.4](https://github.com/RhetTbull/osxphotos/compare/v0.54.3...v0.54.4)

> 24 November 2022

- Added --post-function to import, 842 [`851`](https://github.com/RhetTbull/osxphotos/pull/851)
- Feature import parse date 847 [`850`](https://github.com/RhetTbull/osxphotos/pull/850)
- Version bump for release [`cad4e1e`](https://github.com/RhetTbull/osxphotos/commit/cad4e1eeff54a37826c0e08e2be1b3df3b392f94)
- Added test for 848 [`d6fc8fc`](https://github.com/RhetTbull/osxphotos/commit/d6fc8fc3b1d276fd6b22550e50ec1bdeeb3acf6f)

[v0.54.3](https://github.com/RhetTbull/osxphotos/compare/v0.54.2...v0.54.3)

> 16 November 2022

- add zephyr325 as a contributor for bug [`844`](https://github.com/RhetTbull/osxphotos/pull/844)
- Version bump [`9ed1b39`](https://github.com/RhetTbull/osxphotos/commit/9ed1b394a9b2df1eca04f489c083ca3a71a7809c)
- Fix for timewarp failure on Ventura, 841 [`40de05c`](https://github.com/RhetTbull/osxphotos/commit/40de05c5fdbc8efd8e4bd21eb8b2e17d49f4864e)
- Updated search_info test [`f610d3c`](https://github.com/RhetTbull/osxphotos/commit/f610d3cc65a7909cfe3bd9ad4d5209f193c88a87)

[v0.54.2](https://github.com/RhetTbull/osxphotos/compare/v0.54.1...v0.54.2)

> 14 November 2022

- Added --alt-copy method for 807 [`835`](https://github.com/RhetTbull/osxphotos/pull/835)
- Version bump [`548071e`](https://github.com/RhetTbull/osxphotos/commit/548071e8a6f626b1f22ae7c92d209dd98bf83c27)
- Fixed help text for , 828 [`ea76297`](https://github.com/RhetTbull/osxphotos/commit/ea76297800f3e72e6584618c126fe818f21bc1ae)

[v0.54.1](https://github.com/RhetTbull/osxphotos/compare/v0.54.0...v0.54.1)

> 13 November 2022

- Bug search info macos13 816 [`831`](https://github.com/RhetTbull/osxphotos/pull/831)
- add dmd as a contributor for userTesting [`829`](https://github.com/RhetTbull/osxphotos/pull/829)
- Updated docs [`155f29a`](https://github.com/RhetTbull/osxphotos/commit/155f29a3735e8c93eaa66f3d979cb1a12b7cd4f8)
- Updated build script, dev dependencies [`644582b`](https://github.com/RhetTbull/osxphotos/commit/644582b540c0b4928a2ece3eb3e56eb63af78877)
- Added tests for macOS 13 / Ventura, added test for labels on macOS 13, 816 [`831eecf`](https://github.com/RhetTbull/osxphotos/commit/831eecfdf70992a2aae8f2454a3b96a44ec85e9c)
- Version bump [`f957e43`](https://github.com/RhetTbull/osxphotos/commit/f957e43ee1242f6902b93e36150233b0cab8a42c)
- Updated dependencies for 832 [`0995076`](https://github.com/RhetTbull/osxphotos/commit/0995076fe78e11124b207e6d3796d834582d506f)

[v0.54.0](https://github.com/RhetTbull/osxphotos/compare/v0.53.0...v0.54.0)

> 12 November 2022

- Version bump [`dc1a600`](https://github.com/RhetTbull/osxphotos/commit/dc1a600493b0b3ef598b34a321b0d25b9c7424ac)
- Updated dependencies for python 3.11, 817, 825 [`ff981dd`](https://github.com/RhetTbull/osxphotos/commit/ff981ddc0ae2280636e827e421ccee74ed8ad9e9)
- Updated dependencies for python 3.11, 817, 825 [`7d72499`](https://github.com/RhetTbull/osxphotos/commit/7d72499ac2700c5b53528f817af2f79b0f242057)

[v0.53.0](https://github.com/RhetTbull/osxphotos/compare/v0.52.0...v0.53.0)

> 12 November 2022

- add dmd as a contributor for bug [`824`](https://github.com/RhetTbull/osxphotos/pull/824)
- Bug labels ventura 816 [`823`](https://github.com/RhetTbull/osxphotos/pull/823)
- Added ImportInfo __bool__, 820 [`dcc16c9`](https://github.com/RhetTbull/osxphotos/commit/dcc16c92c16e5e59f6551e6561eaf5824470f3c3)
- Added instructions for python 3.11/pipx [`2e38a56`](https://github.com/RhetTbull/osxphotos/commit/2e38a56f26b873e235db715a64149b5b7129d2d8)
- Updated example to match API [`6dbeaae`](https://github.com/RhetTbull/osxphotos/commit/6dbeaae54174bafce01897599f782d02787d6fe7)
- Update README.md [`2cd61dc`](https://github.com/RhetTbull/osxphotos/commit/2cd61dccf9d36db02c83cbd82743699b9bf8dda6)

[v0.52.0](https://github.com/RhetTbull/osxphotos/compare/v0.51.8...v0.52.0)

> 6 November 2022

- add dalisoft as a contributor for code, and test [`806`](https://github.com/RhetTbull/osxphotos/pull/806)
- fix: remove warning for macOS 11.7 [`805`](https://github.com/RhetTbull/osxphotos/pull/805)
- Refactor update osxmetadata [`804`](https://github.com/RhetTbull/osxphotos/pull/804)
- Version bump [`d91bf14`](https://github.com/RhetTbull/osxphotos/commit/d91bf14790616818dbb8b70431a4ee11601838aa)
- Updated dependencies [`61ac447`](https://github.com/RhetTbull/osxphotos/commit/61ac447e3e425b83a5eba986ed3dbe1d31c66105)
- Fixed typo in requirements.txt [`6fa07d4`](https://github.com/RhetTbull/osxphotos/commit/6fa07d48c55b615a695c309f007675d8b93ade2d)
- Bugfix for bare {filepath} template [`0ba8bc3`](https://github.com/RhetTbull/osxphotos/commit/0ba8bc3eb9caaa9fe7319fd694ef8d64263b9472)

[v0.51.8](https://github.com/RhetTbull/osxphotos/compare/v0.51.7...v0.51.8)

> 25 September 2022

- Bugfix exportdb migration 794 [`795`](https://github.com/RhetTbull/osxphotos/pull/795)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897