Skip to content

uaa/30.1

You can find the source of this version on GitHub at cloudfoundry/uaa-release. It was created based on the commit ae682378.

Release Notes

This is a security release addressing the following issues - CVE-2017-4974: Blind SQL Injection with privileged UAA endpoints (high severity)

Usage

You can reference this release in your deployment manifest from the releases section:

- name: "uaa"
  version: "30.1"
  url: "https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=30.1"
  sha1: "dde2405c7c909b3c30a18a6f16e0a13a3f26dede"

Or upload it to your director with the upload-release command:

bosh upload-release --sha1 dde2405c7c909b3c30a18a6f16e0a13a3f26dede \
  "https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=30.1"

Jobs

Packages