"Why pay for RedHat RHEL if there's CentOS?" somebody may think.

One of the answers is here. Just check it out - most of the vulnerabilities RedHat fixed during one day. For example, "Non-Browser" applications (e.g. Samba, Sendmail, OpenSSH, Gaim, evolution) had 16 issues, with average fixing time 14 hours, and 94% of issues were fixed during one day.

I think it is pretty cool. I am not sure how fast these fixes were distributed from Redhat to other systems. Maybe CentOS guys did that fast - ok, but there much more RedHat like systems that pretend to be in production :)