Don't do a yum update. Let the burden of updated packages be on the upstream centos image