[CentOS] security report from RHEL's Mark Cox