But, the Interim Sofware download page is confusing. There's a version 184.108.40.206, released 04-FEB-2009, but that version doesn't fix the problem. There's a version 220.127.116.11, but the release date, 11-SEP-2008, is far in the past.
8.1(2)15: earliest fixed
But, on Interim Software download page, most recent version is 18.104.22.168 (04-FEB-2009).
I have support contracts that are in the process of being renewed, so if I need TAC for this, I'll have to wait.
Is there some other location to find the releases specified in the advisory?
It was not obvious, but I found where the fixed releases can be found. One place in the advisory talking about obtaining fixed software indicates that you should go through normal software download processes and locations. But as you have found out the fixed releases are not on the normal software download pages.
In the advisory is a small note in the section describing the fixed versions. It says:
I followed that link and got to a page with PSIRT images from which I was able to download version 8.0(4)28. Note that this requires a CCO ID with software download privileges. If that is a problem there is a note in the advisory about how people can contact TAC for assistance in getting fixed releases. If you have a problem with the download of PSIRT images you might give a try at calling the TAC.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...