From the short description in the advisory, would seem like the attacker can cause the tool to overwrite the file after signature verification.