Bug#1150397: [WebKitGTK] regression in Trixie security update broke cid: URIs in Evolution

[John Scott]

Hello,

On Fri, 2026-10-09, Alberto Garcia wrote:
> On Fri, Oct 09, 2026, Joseph Maillardet wrote:
> > Version: 2.54.0-1~deb13u2
> > Since the last security update, Evolution no longer displays images embedded in emails.
> Thanks for the report, I can reproduce the bug.

I have also run into the bug on Trixie, and this is now a major discussion topic in Evolution's support channels.
I see that on October 9, the upstream patch was cherry-picked and staged on the berto/wk2/trixie branch on Salsa. I've built this locally and confirm that it solves the problem. Scanned mailpiece images from the United States Postal Service, for example, are included in mails as additional message parts and referenced with cid: URIs, so this is a showstopper in this particular use case.

Berto, do you plan to upload a regression update? I see you've already had to make one recently, but unless WebKit 2.54.2 is on the horizon I think it's important.

Thank you
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 411 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-webkit-maintainers/attachments/20261021/001b28f3/attachment.sig>