I just realized I can't find an official CentOS fix for CVE-2011-3192. Definitely time to move to Scientific Linux.

Oh.. and I did search CentOS' mailing list and forum, look at what I found..

http://lists.centos.org/pipermail/centos/2011-September/117004.html

Good move, Dag!