We also ran into this bug with Debian 10, package amavisd-new, version 1:2.11.0-6.1 (called by amavisd-milter, using spamassassin). Also we can confirm, that the provided patch fixes the issue.
A wrong detection of the "Originating" state in Amavisd and therefore a reduced amount of spam checks and setting of "ALL_TRUSTED" with score -1 in Spamassassin for all e-mails makes spam detection a lot less effective. Is there anything missing/any chance to get this fixed soon in Debian? Thanks and Best Regards, Patrick Beckmann
