As an enterprise distribution, Red Hat locks packages in the distribution to a specific version, so that the features offered are known and consistent and do not change behavior unexpectedly during the lifetime of the installation.
As you noted, this means the version of software can be "old."
However, they also backport security fixes when available, applying them to the old version. For instance, a number of security fixes have been made for subversion over the life of the distribution. This allows for keeping a secure system without the risk of breakage caused by the introduction of new functionality (which does happen from time to time).
You can obtain information about specific security fixes at Red Hat's site by searching for the CVE number.
Or, to see the change history of the package online, try:
rpm -q --changelog subversion
You'll see the most recent entries first, starting with:
* Wed Feb 12 2014 Joe Orton <email@example.com> - 1.6.11-10
- add security fixes for CVE-2013-1968, CVE-2013-2112, CVE-2014-0032