Sobald gefixed, Roundcube updaten. https://security-tracker.debian.org/tracker/source-package/roundcube