diff --git a/towncrier/newsfragments/2141.bugfix b/towncrier/newsfragments/2141.bugfix
new file mode 100644
index 00000000..2ead7ce3
--- /dev/null
+++ b/towncrier/newsfragments/2141.bugfix
@@ -0,0 +1 @@
+Update roundcube to 1.5.2 to fixe an XSS
diff --git a/webmails/roundcube/Dockerfile b/webmails/roundcube/Dockerfile
index 54b50e60..a222c514 100644
--- a/webmails/roundcube/Dockerfile
+++ b/webmails/roundcube/Dockerfile
@@ -39,7 +39,7 @@ RUN set -eu \
  && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \
  && rm -rf /var/lib/apt/lists
 
-ENV ROUNDCUBE_URL https://github.com/roundcube/roundcubemail/releases/download/1.5.1/roundcubemail-1.5.1-complete.tar.gz
+ENV ROUNDCUBE_URL https://github.com/roundcube/roundcubemail/releases/download/1.5.2/roundcubemail-1.5.2-complete.tar.gz
 ENV CARDDAV_URL https://github.com/mstilkerich/rcmcarddav/releases/download/v4.3.0/carddav-v4.3.0.tar.gz
 
 RUN set -eu \