You can find the source of this version on GitHub at cloudfoundry/uaa-release. It was created based on the commit
This release updates to UAA release 3.9.8
This is a security release which addresses CVE-2017-4960: UAA OAuth DOS via lockout feature
You can reference this release in your deployment manifest from the
- name: "uaa" version: "24.5" url: "https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=24.5" sha1: "eda4c040c2271ac78262eb8677aa684206deeec5"
Or upload it to your director with the
bosh upload-release --sha1 eda4c040c2271ac78262eb8677aa684206deeec5 \ https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=24.5