release: github.com/cloudfoundry/uaa-release / 24.5

Github source: 5d5ec013 or master branch

This release updates to UAA release 3.9.8

This is a security release which addresses CVE-2017-4960: UAA OAuth DOS via lockout feature

Upload this release version to the Director:

$ bosh upload-release https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=24.5 --sha1 eda4c040c2271ac78262eb8677aa684206deeec5

Modify deployment manifest to use this release in addition to any other used releases:

releases:
- name: uaa
  version: "24.5"

Finally add needed deployment jobs and specify values for required properties.

Optionally download sha1: eda4c040c2271ac78262eb8677aa684206deeec5 release tarball locally:

# ...or download it directly using curl
$ curl -L -J -O https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=24.5

# or with wget...
$ wget --content-disposition https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=24.5