Re: decode2text

   Hi, it's not hard coded. You are likely setting it in some included config
   file.

   Try doveconf -ad | grep fts_decoder

   to assure its not hardcoded.

   Aki

     On 13/04/2026 09:24 EEST Joan Moreau via dovecot
     <[1][email protected]> wrote:


     Ok,but I put in my dovecot.conf:

     fts_decoder_driver = tika
     fts_decoder_tika_url = [2]http://localhost:9998/tika/

     however, I get

     # doveconf | grep -i fts_deco
     fts_decoder_driver = script
     fts_decoder_script_socket_path = decode2text

     seems that "decode2text" is hardcoded

     On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:

     >> On 02/04/2026 14:01 EEST Joan Moreau via dovecot
     <[3][email protected]>
     >> wrote:
     >>
     >> Hi
     >>
     >> I can't find decode2text.sh in the git
     >>
     >> Where is it maintained ?
     >>
     >> Thank you
     >>
     >> Joan Hi
     >>
     >> I can't find decode2text.sh in the git
     >>
     >> Where is it maintained ?
     >>
     >> Thank you
     >>
     >> Joan

       Hi!

       decode2text.sh is no longer maintained, see

       CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks
       and
       read unintended files during indexing.

       It can be replaced with e.g. using tika instead (either the cmdline
       version or daemon).

       Aki

       _______________________________________________
       dovecot mailing list -- [4][email protected]
       To unsubscribe send an email to [5][email protected] Ok,but I
       put in my dovecot.conf:


     fts_decoder_driver = tika
     fts_decoder_tika_url = [1][6]http://localhost:9998/tika/

     however, I get

     # doveconf | grep -i fts_deco
     fts_decoder_driver = script
     fts_decoder_script_socket_path = decode2text

     seems that "decode2text" is hardcoded

     On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:

     On 02/04/2026 14:01 EEST Joan Moreau via dovecot
     <[2][7][email protected]> wrote:


     Hi

     I can't find decode2text.sh in the git

     Where is it maintained ?

     Thank you

     Joan Hi

     I can't find decode2text.sh in the git

     Where is it maintained ?

     Thank you

     Joan

     Hi!

     decode2text.sh is no longer maintained, see

     CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and
     read unintended files during indexing.

     It can be replaced with e.g. using tika instead (either the cmdline
     version or daemon).

     Aki

     _______________________________________________
     dovecot mailing list -- [3][8][email protected]
     To unsubscribe send an email to [4][9][email protected]

     References

     Visible links
     1. [10]http://localhost:9998/tika/
     2. mailto:[11][email protected]
     3. mailto:[12][email protected]
     4. mailto:[13][email protected]
     _______________________________________________
     dovecot mailing list -- [14][email protected]
     To unsubscribe send an email to [15][email protected]

References

   Visible links
   1. mailto:[email protected]
   2. http://localhost:9998/tika/
   3. mailto:[email protected]
   4. mailto:[email protected]
   5. mailto:[email protected]
   6. http://localhost:9998/tika/
   7. mailto:[email protected]
   8. mailto:[email protected]
   9. mailto:[email protected]
  10. http://localhost:9998/tika/
  11. mailto:[email protected]
  12. mailto:[email protected]
  13. mailto:[email protected]
  14. mailto:[email protected]
  15. mailto:[email protected]
_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]