It can be confusing to find the upgrades related to PAM, as they are in two places. The base versions, such as 2.7 and 2.8, are found in the Download Center on the Support portal. After you login to the Support portal, put your cursor over Download Center and click Download Products. In the page that opens, start typing Privileged Access Manager in the Product field. Quite a few choices will appear. Any of the options should work for getting the upgrades, but clicking on CA Privileged Access Manager - Debian will definitely work. In the next field click on the release you want and then select the Gen level. You will notice that 2.8 has two choices. Usually there is just one, but 2.8 was re-rolled to address a problem. Take Gen level 0001. Click Go and you will be presented with a list of Product Components. Take a look at the whole list, as you might need some of the other files too. Click Download for the 2.8 patch. Don't confuse it with the 2.8 ova. That you will only need if you are going to deploy a 2.8 version of PAM in VMware. Once the download completes, unzip it and then proceed with the upgrade.
For intermediate patches, such as 2.8.1, 2.8.2 or HotFixes, you will need to go to another section of the support portal. From the Support portal Home page, put your cursor over Knowledge Center and click Product Pages. In the page that opens, start typing Privileged Access Manager in the Product field. Click on Privileged Access Manager when it appears. It will take a few moments, but then the PAM product page will appear. Scroll down until you see Latest Maintenance Releases, on the right hand side of the page. Click that, and then click the Privileged Access Manager link that appears. You will then see the list of intermediate versions and Hot Fixes. For simplicity, here is the link that will take you directly to the page: CA Privileged Access Manager Solutions & Patches - CA Technologies.