Multiple bugs in releases starting with 2.42-1

[Maxim Paperno]

Hello,

I am the author/maintainer of SpamPD project, the upstream origin of this package (https://github.com/mpaperno/spampd).

A bug which breaks multi-recipient delivery for LMTP protocol was recently discovered. It is present in all Debian/Ubuntu packages starting with 2.42-1 (first used in Ubuntu Bionic). (Issue details at https://github.com/mpaperno/spampd/issues/23 and https://github.com/mail-in-a-box/mailinabox/issues/1523)

Furthermore, another issue was introduced by the Debian package maintainer starting with 2.51-1 (used in Ubuntu starting with Cosmic) which neglects to set a required startup option.

Please also see explanation from package maintainer: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923378

An updated Debian package (2.53-1.1) has been released by the maintainer and is now available on "stable", "testing", and "unstable" branches: https://packages.debian.org/source/buster/spampd

Note that packages prior to 2.42-1 (eg. 2.30-23 on Stretch/Artful) are not affected by either issue and properly support multi-recipient LMTP.

I highly recommend updating all SpamPD versions starting with 2.40 to 2.53.

Regards,
-Max

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Paul Pace (myfirstnameispaul)]

I don't know if there is any way to increase the attention being put on this bug, but just as an FYI, spampd is used in a project called Mail-in-a-Box, a self-configuring mail server project [1] built on Ubuntu 18.04.

The install base for the project is currently over 21,000 based a report at Shodan [2].

If you can find it in your hearts to review updating the 18.04 package to the latest release or even adding a backport from 20.04, that would really be appreciated.

[1] https://mailinabox.email https://github.com/mail-in-a-box/mailinabox
[2] https://www.shodan.io/search?query=mail-in-a-box