Il 11/Nov/2016 22:03, "Mohammed Naser" <mnaser@vexxhost.com> ha scritto:
>
> Hi everyone!
>
> It seems that the latest released version of qemu-kvm-ev is
> qemu-kvm-ev-2.3.0-31.el7_2.21.1 based on the following:
>
> https://cbs.centos.org/koji/packageinfo?packageID=539
>
> However, our systems are refusing to update to that package because
> qemu-kvm-ev-2.3.0-31.el7.16.1 is installed.  I believe the 16.1 is
> making it seem that it is newer than 2.21.1 (16 > 2). 

Looks like dist tag is not considered in version computation. 21.1 is higher than 16.1 but el7 is considered higher than el7_2. Just to be sure, please try yum clean metadata, and then yum distro-sync.

As a result,
> we're unable to update and it seems that the latest package covers 2
> CVE's, to which this one doesn't.
>
> Is this something that was done on purpose to control releases or is this a bug?
>
> Thanks,
> Mohammed
>
> --
> Mohammed Naser — vexxhost
> -----------------------------------------------------
> D. 514-316-8872
> D. 800-910-1726 ext. 200
> E. mnaser@vexxhost.com
> W. http://vexxhost.com
> _______________________________________________
> CentOS-devel mailing list
> CentOS-devel@centos.org
> https://lists.centos.org/mailman/listinfo/centos-devel