Packages update fail when OS version/ocp version is lock

Issue

RHEL 7.5 does not support OpenShift 3.6 so want to prevent upgrading the kernel.

However, patching other packages are necessary for the same OS version so the release version is set by subscription-manager release --set 7.4. However, it causes dependencies errors:

Error: Package: 2:container-selinux-2.55-1.el7.noarch (rhel-7-server-extras-rpms)
           Requires: selinux-policy >= 3.13.1-183
           Removing: selinux-policy-3.13.1-102.el7.noarch (@anaconda/7.3)
               selinux-policy = 3.13.1-102.el7
           Updated By: selinux-policy-3.13.1-166.el7_4.9.noarch (rhel-7-server-rpms)
               selinux-policy = 3.13.1-166.el7_4.9
           Available: selinux-policy-3.12.1-153.el7.noarch (rhel-7-server-rpms)
...
..

How can we update packages under same version of OS?