Package: cyrus-common Version: 3.2.0-5~bpo10+1 Severity: normal Hi, After the upgrade to version 3.2, the httpd process for CARD-DAV connections reaches very high CPU usage in a short time.
-- System Information: Debian Release: 10.4 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable'), (100, 'testing'), (50, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-8-amd64 (SMP w/12 CPU cores) Kernel taint flags: TAINT_FIRMWARE_WORKAROUND Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE=it_IT.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages cyrus-common depends on: ii adduser 3.118 ii db-upgrade-util 5.3.1+nmu1 ii db-util 5.3.1+nmu1 ii debconf [debconf-2.0] 1.5.71 ii e2fsprogs 1.44.5-1+deb10u3 ii exim4-daemon-heavy [mail-transport-agent] 4.92-8+deb10u4 ii gawk 1:4.2.1+dfsg-1 ii init-system-helpers 1.56+nmu1 ii libbrotli1 1.0.7-2 ii libc6 2.28-10 ii libclamav9 0.102.2+dfsg-0+deb10u1 ii libcom-err2 1.44.5-1+deb10u3 ii libgcc1 1:8.3.0-6 ii libgssapi-krb5-2 1.17-3 ii libical3 3.0.4-3 ii libicu63 63.1-6+deb10u1 ii libjansson4 2.12-1 ii libk5crypto3 1.17-3 ii libkrb5-3 1.17-3 ii libkrb5support0 1.17-3 ii libldap-2.4-2 2.4.47+dfsg-3+deb10u2 ii libnghttp2-14 1.40.0-1 ii libpcre3 2:8.39-12 ii libpq5 11.7-0+deb10u1 ii libsasl2-2 2.1.27+dfsg-1+deb10u1 ii libsasl2-modules 2.1.27+dfsg-1+deb10u1 ii libshp2 1.4.1-3 ii libsnmp30 5.7.3+dfsg-5 ii libsqlite3-0 3.27.2-3 ii libssl1.1 1.1.1d-0+deb10u3 ii libstdc++6 8.3.0-6 ii libwrap0 7.6.q-28 ii libxapian30 1.4.11-1 ii libxml2 2.9.4+dfsg1-7+b3 ii libzephyr4 3.1.2-1+b3 ii lsb-base 10.2019051400 ii netbase 5.6 ii perl 5.28.1-6 ii zlib1g 1:1.2.11.dfsg-1 Versions of packages cyrus-common recommends: ii cyrus-admin 3.2.0-5~bpo10+1 ii cyrus-caldav 3.2.0-5~bpo10+1 ii cyrus-imapd 3.2.0-5~bpo10+1 Versions of packages cyrus-common suggests: ii apt-listchanges 3.19 ii cyrus-admin 3.2.0-5~bpo10+1 ii cyrus-caldav 3.2.0-5~bpo10+1 ii cyrus-clients 3.2.0-5~bpo10+1 pn cyrus-doc <none> ii cyrus-imapd 3.2.0-5~bpo10+1 pn cyrus-murder <none> pn cyrus-nntpd <none> pn cyrus-pop3d <none> pn cyrus-replication <none> ii sasl2-bin 2.1.27+dfsg-1+deb10u1 -- Configuration Files: /etc/cyrus.conf changed: START { # do not delete this entry! recover cmd="/usr/sbin/cyrus ctl_cyrusdb -r" # this is only necessary if idlemethod is set to "idled" in imapd.conf idled cmd="idled" # this is useful on backend nodes of a Murder cluster # it causes the backend to syncronize its mailbox list with # the mupdate master upon startup #mupdatepush cmd="/usr/sbin/cyrus ctl_mboxlist -m" # this is recommended if using duplicate delivery suppression delprune cmd="/usr/sbin/cyrus expire -E 3" # this is recommended if caching TLS sessions tlsprune cmd="/usr/sbin/cyrus tls_prune" } SERVICES { # --- Normal cyrus spool, or Murder backends --- # add or remove based on preferences imap cmd="imapd -U 30" listen="imap" prefork=0 maxchild=200 imaps cmd="imapd -s -U 30" listen="imaps" prefork=0 maxchild=200 #pop3 cmd="pop3d -U 30" listen="pop3" prefork=0 maxchild=50 #pop3s cmd="pop3d -s -U 30" listen="pop3s" prefork=0 maxchild=50 #nntp cmd="nntpd -U 30" listen="nntp" prefork=0 maxchild=100 #nntps cmd="nntpd -s -U 30" listen="nntps" prefork=0 maxchild=100 #http cmd="httpd -U 30" listen="8008" prefork=0 maxchild=100 https cmd="httpd -s -U 30" listen="8443" prefork=0 maxchild=100 # At least one form of LMTP is required for delivery # (you must keep the Unix socket name in sync with imap.conf) #lmtp cmd="lmtpd" listen="localhost:lmtp" prefork=0 maxchild=20 lmtpunix cmd="lmtpd" listen="/run/cyrus/socket/lmtp" prefork=0 maxchild=20 # ---------------------------------------------- # useful if you need to give users remote access to sieve # by default, we limit this to localhost in Debian sieve cmd="timsieved" listen="localhost:sieve" prefork=0 maxchild=100 # this one is needed for the notification services notify cmd="notifyd" listen="/run/cyrus/socket/notify" proto="udp" prefork=1 # --- Murder frontends ------------------------- # enable these and disable the matching services above, # except for sieve (which deals automatically with Murder) # mupdate database service - must prefork at least 1 # (mupdate slaves) #mupdate cmd="mupdate" listen=3905 prefork=1 # (mupdate master, only one in the entire cluster) #mupdate cmd="mupdate -m" listen=3905 prefork=1 # proxies that will connect to the backends #imap cmd="proxyd" listen="imap" prefork=0 maxchild=100 #imaps cmd="proxyd -s" listen="imaps" prefork=0 maxchild=100 #pop3 cmd="pop3proxyd" listen="pop3" prefork=0 maxchild=50 #pop3s cmd="pop3proxyd -s" listen="pop3s" prefork=0 maxchild=50 #lmtp cmd="lmtpproxyd" listen="lmtp" prefork=1 maxchild=20 # ---------------------------------------------- } EVENTS { # this is required checkpoint cmd="/usr/sbin/cyrus ctl_cyrusdb -c" period=30 # this is only necessary if using duplicate delivery suppression delprune cmd="/usr/sbin/cyrus expire -E 3" at=0401 # this is only necessary if caching TLS sessions tlsprune cmd="/usr/sbin/cyrus tls_prune" at=0401 # Expire data older than 28 days. deleteprune cmd="/usr/sbin/cyrus expire -E 4 -D 28" at=0430 expungeprune cmd="/usr/sbin/cyrus expire -E 4 -X 28" at=0445 # indexing of mailboxes for server side fulltext searches # reindex changed mailboxes (fulltext) approximately every other hour #squatter1 cmd="/usr/bin/nice -n 19 /usr/sbin/cyrus squatter -s" period=120 # reindex all mailboxes (fulltext) daily squattera cmd="/usr/sbin/cyrus squatter" at=0517 } /etc/default/cyrus-imapd changed: CYRUS_VERBOSE=1 LISTENQUEUE=64 OPTIONS="" /etc/imapd.conf changed: configdirectory: /var/lib/cyrus proc_path: /run/cyrus/proc mboxname_lockpath: /run/cyrus/lock defaultpartition: default partition-default: /home/cyrus/mail partition-news: /var/spool/cyrus/news newsspool: /var/spool/news altnamespace: no unixhierarchysep: yes lmtp_downcase_rcpt: yes admins: cyrus allowanonymouslogin: no popminpoll: 1 autocreate_quota: 0 umask: 077 sieveusehomedir: false sievedir: /var/spool/sieve httpmodules: caldav carddav hashimapspool: true allowplaintext: yes sasl_mech_list: PLAIN sasl_pwcheck_method: saslauthd sasl_auto_transition: no tls_server_cert: /etc/letsencrypt/live/mailserver.resnovae.it/cert.pem tls_server_key: /etc/letsencrypt/live/mailserver.resnovae.it/privkey.pem tls_client_ca_file: /etc/ssl/certs/GeoTrust_Primary_Certification_Authority.pem tls_client_ca_dir: /etc/ssl/certs tls_session_timeout: 1440 lmtpsocket: /run/cyrus/socket/lmtp idlesocket: /run/cyrus/socket/idle notifysocket: /run/cyrus/socket/notify syslog_prefix: cyrus -- debconf information excluded