Solved: how to get specific interim release?

linnea.wren · ‎04-14-2009

hey...

Advisory ID: cisco-sa-20090408-asa describes a vulnerability that applies to an ASA 5520 I administer.

The advisory page, http://www.cisco.com/warp/public/707/cisco-sa-20090408-asa.shtml, says this:

8.0(4)25: earliest fixed version,

8.0(4)28: recommended version.

But, the Interim Sofware download page is confusing. There's a version 8.0.4.23, released 04-FEB-2009, but that version doesn't fix the problem. There's a version 8.0.4.3, but the release date, 11-SEP-2008, is far in the past.

For v8.1,

8.1(2)15: earliest fixed

8.1(2)19: recommended.

But, on Interim Software download page, most recent version is 8.1.2.13 (04-FEB-2009).

I have support contracts that are in the process of being renewed, so if I need TAC for this, I'll have to wait.

Is there some other location to find the releases specified in the advisory?

tia...

burtonwindle · ‎04-14-2009

it is hard to find for some reason, but its in the advisory:

"Fixed Cisco ASA software can be downloaded from:

http://www.cisco.com/pcgi-bin/tablebuild.pl/ASAPSIRT

Fixed Cisco PIX software can be downloaded from:

http://www.cisco.com/pcgi-bin/tablebuild.pl/PIXPSIRT

"

View solution in original post

burtonwindle · ‎04-14-2009

it is hard to find for some reason, but its in the advisory:

"Fixed Cisco ASA software can be downloaded from:

http://www.cisco.com/pcgi-bin/tablebuild.pl/ASAPSIRT

Fixed Cisco PIX software can be downloaded from:

http://www.cisco.com/pcgi-bin/tablebuild.pl/PIXPSIRT

"

Richard Burts · ‎04-14-2009

Linnea

It was not obvious, but I found where the fixed releases can be found. One place in the advisory talking about obtaining fixed software indicates that you should go through normal software download processes and locations. But as you have found out the fixed releases are not on the normal software download pages.

In the advisory is a small note in the section describing the fixed versions. It says:

Fixed Cisco ASA software can be downloaded from:

http://www.cisco.com/pcgi-bin/tablebuild.pl/ASAPSIRT

I followed that link and got to a page with PSIRT images from which I was able to download version 8.0(4)28. Note that this requires a CCO ID with software download privileges. If that is a problem there is a note in the advisory about how people can contact TAC for assistance in getting fixed releases. If you have a problem with the download of PSIRT images you might give a try at calling the TAC.

HTH

Rick

HTH

Rick

linnea.wren · ‎04-16-2009

Hey...

Sorry for the late acknowledgement.

Thank you both for the solutions provided.

Linnea