Ok,but I put in my dovecot.conf:
fts_decoder_driver = tika fts_decoder_tika_url = http://localhost:9998/tika/
however, I get
doveconf | grep -i fts_deco
fts_decoder_driver = script fts_decoder_script_socket_path = decode2text
seems that "decode2text" is hardcoded
On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:
On 02/04/2026 14:01 EEST Joan Moreau via dovecot <dovecot@dovecot.org> wrote:
Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan
Hi!
decode2text.sh is no longer maintained, see
CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended files during indexing.
It can be replaced with e.g. using tika instead (either the cmdline version or daemon).
Aki
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
Ok,but I put in my dovecot.conf:
fts_decoder_driver = tika fts_decoder_tika_url = [1]http://localhost:9998/tika/
however, I get
doveconf | grep -i fts_deco
fts_decoder_driver = script fts_decoder_script_socket_path = decode2text
seems that "decode2text" is hardcoded
On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:
On 02/04/2026 14:01 EEST Joan Moreau via dovecot
<[2]dovecot@dovecot.org> wrote:
Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan
Hi!
decode2text.sh is no longer maintained, see
CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and
read unintended files during indexing.
It can be replaced with e.g. using tika instead (either the cmdline
version or daemon).
Aki
_______________________________________________
dovecot mailing list -- [3]dovecot@dovecot.org
To unsubscribe send an email to [4]dovecot-leave@dovecot.orgReferences
Visible links
- http://localhost:9998/tika/
- mailto:dovecot@dovecot.org
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org