So CentOS and any other repackaged version of RHEL is going to lag behind the commercial product. Typically this is not a major issue, but when critical security issues are discovered and made public, you need updates quickly. If you have contracted someone to provide CentOS support, they cannot do anything until the CentOS group rebuilds the packages.