Re:Webmin 1.890 Exploit – What Happened?
by structural on Sunday August 25, 2019 @04:24PM
(#20795330)
That doesn't stop you from changing something in your working copy.
The hack here is that the working copy used to build from wasn't a clean clone on each build, so just fetching changes from the (un-pwned) github repository would apply those changes and not affect the modified file on the build server.
The hack here is that the working copy used to build from wasn't a clean clone on each build, so just fetching changes from the (un-pwned) github repository would apply those changes and not affect the modified file on the build server.