Updated evolution package fixes a security vulnerability

Javascript execution via spoofed vcard control bypasses mail script-markup restriction. CVE-2026-88859...