And heaven help you if RedHat decides not to backport a critical bugfix. OpenSSL on CentOS 6 has 99 patch files, a script named &quot;hobble-openssl&quot; and non-trivial changes to the build system that affect linkage, making DIY backports less than trivial.