On 12/11/16 10:02, Mohammed Naser wrote: > It seems that the latest released version of qemu-kvm-ev is > qemu-kvm-ev-2.3.0-31.el7_2.21.1 based on the following: > > https://cbs.centos.org/koji/packageinfo?packageID=539 > > However, our systems are refusing to update to that package because > qemu-kvm-ev-2.3.0-31.el7.16.1 is installed. I believe the 16.1 is > making it seem that it is newer than 2.21.1 (16 > 2). As a result, > we're unable to update and it seems that the latest package covers 2 > CVE's, to which this one doesn't. No, it sorts properly: $ printf '%s\n' 2.3.0-31.el7_2.21.1 2.3.0-31.el7.16.1 | sort -V 2.3.0-31.el7.16.1 2.3.0-31.el7_2.21.1 > Is this something that was done on purpose to control releases or is this a bug? Neither, you likely do not have centos-release-qemu-ev installed, have disabled the repo or are using an out of date mirror. Peter