Re: decode2text

Joan Moreau via dovecot <[email protected]> Mon, 13 Apr 2026 14:24:59 +0800
Newsgroups gmane.mail.imap.dovecot
Message-ID <[email protected]>
Ok,but I put in my dovecot.conf:

fts_decoder_driver = tika
fts_decoder_tika_url = http://localhost:9998/tika/

however, I get

# doveconf | grep -i fts_deco
fts_decoder_driver = script
fts_decoder_script_socket_path = decode2text

seems that "decode2text" is hardcoded

On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:

>> On 02/04/2026 14:01 EEST Joan Moreau via dovecot <[email protected]> 
>> wrote:
>> 
>> Hi
>> 
>> I can't find decode2text.sh in the git
>> 
>> Where is it maintained ?
>> 
>> Thank you
>> 
>> Joan   Hi
>> 
>> I can't find decode2text.sh in the git
>> 
>> Where is it maintained ?
>> 
>> Thank you
>> 
>> Joan
> 
> Hi!
> 
> decode2text.sh is no longer maintained, see
> 
> CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and 
> read unintended files during indexing.
> 
> It can be replaced with e.g. using tika instead (either the cmdline 
> version or daemon).
> 
> Aki
> 
> _______________________________________________
> dovecot mailing list -- [email protected]
> To unsubscribe send an email to [email protected]

_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]