This isnt really a bug I guess... more of 'depricated' maybe?
The spam custom action (CustomAction.pm) no longer works in EFA 4.0. So no spam reporting link and no spam release notification email possible.
This might be a good thing - as it forced us to re-evaluate if these items are really needed or not.