Ive gotten the task to find a suitable way of guaranteeing a specific patch version of all yum base packages on different sets of systems. The reason for this is of course stability. The scenario where this could happen is if a new critical update is released, and meanwhile it was tested in the test environment theres a new update, so when the update is done on a production environment its actually ahead of the test system.
I think it could be handled quite well by setting up an internal yum mirror which guarantees what CentOS packages is available. Are there other options? Could spacewalk be of help in this case?