Astaro recommends that Up2date 4.017 should **not** be applied to any production system at this time because of the included kernel upgrade and reboot.
.... Until this assessment is completed, Astaro recommends that this release **not** be applied to any production system.
You can use 4.017. There is just one thing that could go wrong. And this is APIC on some (buggy) mainboards. There is a thread, how to make a workaround (disable apic) for that (if you are one of the few ...)
Workaround is to give 'default noapic' at the boot-promt.