Security Focus didn't send you anything, it was a forged email header. For example, my primary TechIMO address was used in the first known batch of MyDoom emails.
If you examine the source of the email, you will find the message never originated from any known Security Focus server.
Robert Richmond