How to install security patches on CentOS 7.x
yum update --security does not work with CentOS, due to the repos missing security tag information.
You need to issue a more invasive, system wide update with yum update or, alternatively, to only update the affected packages.