I think we have different configurations. In my configuration I have added some user pop3 accounts to the local admin in the user Portal. Also prefetch is configured on the utm. Not the user itself should release the spam mails. Just the Admin will do that.
wouldn't it be an option to just disable the release options for users (Quarantine Report -> Advanced) ? Only the admin would able to release mails through the mail manager, which works for me. But maybe I'm still not having the same setup as you.
the problem is that the admin can't release a pop3 spam mail for the user in the mail manager. I don't know why. SPAM release from the SMTP quarantine in mail manager works fine for me. The issue just occurs when the admin will release a pop3 SPAM mail.
As far as I know this problem was not reproducible here. I will delegate this thread to the responsible person but I think you have to wait until next year for an answer.