diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3f78ae8..d83d3d2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Unreleased
 
+### [1.2.8] - 2024-10-07
+
+- fix: mech_MX crit error on logging undef addrs
+
 ### [1.2.7] - 2024-08-14
 
 - test: in index.js, unref timers, so test suite exits
diff --git a/lib/spf.js b/lib/spf.js
index f466571..8cd40f0 100644
--- a/lib/spf.js
+++ b/lib/spf.js
@@ -520,8 +520,8 @@ class SPF {
         }
       }
 
-      this.log_debug(`mech_mx: mx=${mx} addresses=${addrs.join(',')}`)
-      addresses = addrs.concat(addresses)
+      this.log_debug(`mech_mx: mx=${mx} addresses=${addrs?.join(',')}`)
+      addresses = addrs ? addrs.concat(addresses) : [];
     }
 
     if (!addresses.length) return this.SPF_NONE
diff --git a/package.json b/package.json
index fac504a..07639ad 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "haraka-plugin-spf",
-  "version": "1.2.7",
+  "version": "1.2.8",
   "description": "Sender Policy Framework (SPF) plugin for Haraka",
   "main": "index.js",
   "files": [