Our CVE Story: Why Red Hat Became a Root

Guest author Yogesh Mittal is a Manager at Red Hat Product Security, and Red Hat is a long-time CVE Numbering Authority (CNA) and now a Root.

Red Hat was recently designated as a CVE Program Root covering open-source software for any projects or existing CNAs that prefer to choose Red Hat as their Root. In the CVE Program, a “Root” is an organization authorized within the CVE Program that is responsible, within a specific scope, for the recruitment, training, …

cybersecurity information security information technology open source vulnerability