diff --git a/docs/releases.rst b/docs/releases.rst
index db042047..fb729c12 100644
--- a/docs/releases.rst
+++ b/docs/releases.rst
@@ -15,7 +15,7 @@ Quite a lot of new features have been implemented. Of these new features we'd li
 Security
 ^^^^^^^^
 
-A far amount of work went in this release; In no particular order:
+A fair amount of work went in this release; In no particular order:
 
 - outbound SMTP connections from Mailu are now enjoying some protection against active attackers thanks to DANE and MTA-STS support. Specific policies can be configured for specific destinations thanks to ``tls_policy_maps`` and configuring your system to publish a policy has been documented in the FAQ.
 - outbound emails can now be rate-limited (to mitigate SPAM in case an account is taken over)
diff --git a/towncrier/newsfragments/2117.bugfix b/towncrier/newsfragments/2117.bugfix
new file mode 100644
index 00000000..2fdc332f
--- /dev/null
+++ b/towncrier/newsfragments/2117.bugfix
@@ -0,0 +1,3 @@
+The gpg-agent package was missing due to updating to a new debian version.
+This fix adds gpg-agent back to the roundcube image.
+It is used for the enigmail roundcube plugin.
diff --git a/webmails/roundcube/Dockerfile b/webmails/roundcube/Dockerfile
index 7584b558..54b50e60 100644
--- a/webmails/roundcube/Dockerfile
+++ b/webmails/roundcube/Dockerfile
@@ -17,7 +17,7 @@ RUN set -eu \
  && echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections \
  && apt install -y --no-install-recommends \
       python3 curl python3-pip git python3-multidict \
-      python3-jinja2 gpg tzdata \
+      python3-jinja2 gpg gpg-agent tzdata \
  && pip3 install socrate \
  && echo date.timezone=UTC > /usr/local/etc/php/conf.d/timezone.ini \
  && echo "ServerSignature Off\nServerName roundcube" >> /etc/apache2/apache2.conf \