Apt-cache policy <pkg> does not match /var/log/apt/history.log

With the recent samba 4.3.8 update, access to no pw windws shares does not work so I tried to rollback samba and related packages to 4.1.7 Looked around in /var/log/apt/history.log and apt-cache policy and saw some differences as seen in http://paste.ubuntu.com/16073383/ Any ideas? Thank you.

There is a bug report

https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572876

I know about that bug report. My question is, the samba full package name from policy is different from the one in the history.log so I need to know why so I can rollback correctly.
from policy … 2:4.1.17+dfsg-4ubuntu2
from history.log … 4.1.17+dfsg-4ubuntu3.3