Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan
Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan
On 02/04/2026 14:01 EEST Joan Moreau via dovecot <dovecot@dovecot.org> wrote:
Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan
Hi!
decode2text.sh is no longer maintained, see
CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended files during indexing.
It can be replaced with e.g. using tika instead (either the cmdline version or daemon).
Aki
Ok,but I put in my dovecot.conf:
fts_decoder_driver = tika fts_decoder_tika_url = http://localhost:9998/tika/
however, I get
doveconf | grep -i fts_deco
fts_decoder_driver = script fts_decoder_script_socket_path = decode2text
seems that "decode2text" is hardcoded
On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:
On 02/04/2026 14:01 EEST Joan Moreau via dovecot <dovecot@dovecot.org> wrote:
Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan
Hi!
decode2text.sh is no longer maintained, see
CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended files during indexing.
It can be replaced with e.g. using tika instead (either the cmdline version or daemon).
Aki
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
Ok,but I put in my dovecot.conf:
fts_decoder_driver = tika fts_decoder_tika_url = [1]http://localhost:9998/tika/
however, I get
doveconf | grep -i fts_deco
fts_decoder_driver = script fts_decoder_script_socket_path = decode2text
seems that "decode2text" is hardcoded
On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:
On 02/04/2026 14:01 EEST Joan Moreau via dovecot
<[2]dovecot@dovecot.org> wrote:
Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan
Hi!
decode2text.sh is no longer maintained, see
CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and
read unintended files during indexing.
It can be replaced with e.g. using tika instead (either the cmdline
version or daemon).
Aki
_______________________________________________
dovecot mailing list -- [3]dovecot@dovecot.org
To unsubscribe send an email to [4]dovecot-leave@dovecot.orgReferences
Visible links
- http://localhost:9998/tika/
- mailto:dovecot@dovecot.org
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
Hi, it's not hard coded. You are likely setting it in some included config file.
Try doveconf -ad | grep fts_decoder
to assure its not hardcoded.
Aki
On 13/04/2026 09:24 EEST Joan Moreau via dovecot
<[1]dovecot@dovecot.org> wrote:
Ok,but I put in my dovecot.conf:
fts_decoder_driver = tika
fts_decoder_tika_url = [2]http://localhost:9998/tika/
however, I get
# doveconf | grep -i fts_deco
fts_decoder_driver = script
fts_decoder_script_socket_path = decode2text
seems that "decode2text" is hardcoded
On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:
>> On 02/04/2026 14:01 EEST Joan Moreau via dovecot
<[3]dovecot@dovecot.org>
>> wrote:
>>
>> Hi
>>
>> I can't find decode2text.sh in the git
>>
>> Where is it maintained ?
>>
>> Thank you
>>
>> Joan Hi
>>
>> I can't find decode2text.sh in the git
>>
>> Where is it maintained ?
>>
>> Thank you
>>
>> Joan
Hi!
decode2text.sh is no longer maintained, see
CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks
and
read unintended files during indexing.
It can be replaced with e.g. using tika instead (either the cmdline
version or daemon).
Aki
_______________________________________________
dovecot mailing list -- [4]dovecot@dovecot.org
To unsubscribe send an email to [5]dovecot-leave@dovecot.org Ok,but I
put in my dovecot.conf:
fts_decoder_driver = tika
fts_decoder_tika_url = [1][6]http://localhost:9998/tika/
however, I get
# doveconf | grep -i fts_deco
fts_decoder_driver = script
fts_decoder_script_socket_path = decode2text
seems that "decode2text" is hardcoded
On 2026-04-02 19:08, Aki Tuomi via dovecot wrote:
On 02/04/2026 14:01 EEST Joan Moreau via dovecot
<[2][7]dovecot@dovecot.org> wrote:
Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan Hi
I can't find decode2text.sh in the git
Where is it maintained ?
Thank you
Joan
Hi!
decode2text.sh is no longer maintained, see
CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and
read unintended files during indexing.
It can be replaced with e.g. using tika instead (either the cmdline
version or daemon).
Aki
_______________________________________________
dovecot mailing list -- [3][8]dovecot@dovecot.org
To unsubscribe send an email to [4][9]dovecot-leave@dovecot.org
References
Visible links
1. [10]http://localhost:9998/tika/
2. mailto:[11]dovecot@dovecot.org
3. mailto:[12]dovecot@dovecot.org
4. mailto:[13]dovecot-leave@dovecot.org
_______________________________________________
dovecot mailing list -- [14]dovecot@dovecot.org
To unsubscribe send an email to [15]dovecot-leave@dovecot.orgReferences
Visible links
- mailto:dovecot@dovecot.org
- http://localhost:9998/tika/
- mailto:dovecot@dovecot.org
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
- http://localhost:9998/tika/
- mailto:dovecot@dovecot.org
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
- http://localhost:9998/tika/
- mailto:dovecot@dovecot.org
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
participants (2)
-
Aki Tuomi
-
Joan Moreau