You can access public installer patches automatically or manually on the Symantec Operations Readiness Tools (SORT) website's Patch Finder page at:
https://sort.symantec.com/patch/finder
To download installer patches automatically
Automatically downloading installer patches requires the installer to make outbound networking calls. You can also disable external network connection attempts.
See Disabling external network connection attempts.
If your system does not have Internet access, you can download installer patches manually.
To download installer patches manually
# gunzip cpi-7.0P2-patches.tar.gz
# tar -xvf cpi-7.0P2-patches.tar
patches/
patches/CPI7.0P2.pl
README
# ./installer -require /target_directory/patches/CPI7.0P2.pl