We burn our own CDs on the day we send them, from images we download directly from the Debian servers. This means that you are getting the latest version. Some vendors produce a large number of CDs in advance, then sell them until they run out. Since Debian upgrades come unexpectedly, this means those vendors must continue shipping those out-dated CDs until they run out, even though it may be long after the release of a new version.