Fermilab baseline's say you have to keep up with security updates.
Remember that kernels have security updates too, but autoyum doesn't do kernels by default.
And ... you have to reboot to get into the new updated kernel.
Web page on how to make autoyum do your kernel, comming soon.