A new Debian Linux update has been published: DSA 4674-1: roundcube security update
A roundcube security update has been released for both Debian GNU/Linux 9 and 10 to address CSRF and XSS issues.Read more @ Linux Compatible