It's a plugin for yum that tracks security advisories from the OS vendor (Red Hat, CentOS, etc.)