There are probably more security updates which should be installed by yum --security but those are the packages I am most interested in.
Please change as necessary to allow yum --security to work.
CentOS does not provide the metadata to allow the --security flag to work.
It doesn't provide it because that information from Redhat is proprietary and not open source.
P.