The same way RHEL ones are. The 'stable' releases ...
# puppet
y
The same way RHEL ones are. The 'stable' releases are always older; you'd have to use 'testing' or whatever is ahead of that for newer packages (and more likelihood of breakage).