VMware does not release a distinct vSAN Witness Appliance OVA for every minor patch release. Minor updates are applied as in-place patches to a baseline Witness Appliance (e.g., 8.0 U3).
Update the vSAN Witness host using the standard ESXi offline patch bundle:
esxcli software profile update -p <profile_name> -d /vmfs/volumes/<datastore>/<filename>.zip --no-hardware-warning