<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I hope you are well.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have been attempting to contact someone who would be in charge of product security for the following reason:
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My name is Jeremiah Stoddard. I am a cybersecurity analyst for DHS-CISA.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am contacting you to alert you of a vulnerability has been found that affects the Linux Foundation klibc (2.0.8) product.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have attached a .PDF document that discusses the vulnerability.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please acknowledge receipt.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Regards,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Jeremiah Stoddard<o:p></o:p></p>
<p class="MsoNormal">Industrial Control Systems Vulnerability Management and Coordination (ICS-VMC)<o:p></o:p></p>
<p class="MsoNormal">Cybersecurity and Infrastructure Security Agency (CISA)<o:p></o:p></p>
<p class="MsoNormal">US Department of Homeland Security (DHS)<o:p></o:p></p>
<p class="MsoNormal">Web: <a href="https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.us-cert.gov%2Fics&data=02%7C01%7CJeremiah.Stoddard%40inl.gov%7C1f779f0bb8f848cb922708d859444894%7C4cf464b7869a42368da2a98566485554%7C0%7C0%7C637357497100203690&sdata=NxBsJ8iCv6LN23sZHspBabfQilS4VKv%2FotfVbQIvcRs%3D&reserved=0">
<span style="color:blue">https://www.us-cert.gov/ics</span></a><o:p></o:p></p>
<p class="MsoNormal">Phone: 208-526-0900, 877-776-7585<o:p></o:p></p>
<p class="MsoNormal">Email: <a href="mailto:ics-cert@hq.dhs.gov"><span style="color:blue">ics-cert@hq.dhs.gov</span></a>,
<a href="mailto:csoc@inl.gov"><span style="color:blue">csoc@inl.gov</span></a><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> GRP-CSOC <br>
<b>Sent:</b> Wednesday, December 16, 2020 4:21 PM<br>
<b>To:</b> security@linuxfoundation.org<br>
<b>Cc:</b> GRP-CSOC <csoc@inl.gov>; ics-cert@hq.dhs.gov<br>
<b>Subject:</b> ICS-VU-393924 New Vulnerability<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I hope you are well.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My name is Jeremiah Stoddard. I am a cybersecurity analyst for DHS-CISA.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am contacting you to alert you of a vulnerability has been found that affects the Linux Foundation klibc (2.0.8) product.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have attached a .PDF document that discusses the vulnerability.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please acknowledge receipt.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Regards,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Jeremiah Stoddard<o:p></o:p></p>
<p class="MsoNormal">Industrial Control Systems Vulnerability Management and Coordination (ICS-VMC)<o:p></o:p></p>
<p class="MsoNormal">Cybersecurity and Infrastructure Security Agency (CISA)<o:p></o:p></p>
<p class="MsoNormal">US Department of Homeland Security (DHS)<o:p></o:p></p>
<p class="MsoNormal">Web: <a href="https://www.us-cert.gov/ics">https://www.us-cert.gov/ics</a><o:p></o:p></p>
<p class="MsoNormal">Phone: 208-526-0900, 877-776-7585<o:p></o:p></p>
<p class="MsoNormal">Email: <a href="mailto:ics-cert@hq.dhs.gov">ics-cert@hq.dhs.gov</a>,
<a href="mailto:csoc@inl.gov">csoc@inl.gov</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>