I know this is not the best answer for this question, but this is all we internal Cisco folks know about the situation:
We are aware of the posting regarding the purported sale of the PIX 6.3.1. Cisco is actively looking into the alleged claims by some Internet groups on the purported sale and general availability of the Cisco PIX 6.3.1 source code. As a rule, we encourage all customers to maintain best practices in keeping their systems updated with the latest software (v6.3.4).
Cisco remains dedicated and focused on providing secure, intelligent networking systems to its customers and partners.
Hope this helps.
Scott