CLSA-2026-1785489136 Fix CVE(s): CVE-2026-11386, CVE-2026-12391, CVE-2026-9494

SECURITY UPDATE: Pro bearer token exposed via apt-helper command line - Write APT credentials to a temporary 0600 auth file and pass a credential-free URL to apt-helper, instead of embedding the token in the download-file URL argument where it leaked to local users via /proc//cmdline. Source...