Update Manager: Kernel updates - security updates or new features only?

[Foster]

moving on slightly, I am never sure about kernel updates with dire warnings ,are they a security feature or just to enable more modern
apps could someone enlighten in understandable text for a novice?

[gm10]

moving on slightly, I am never sure about kernel updates with dire warnings ,are they a security feature or just to enable more modern
apps could someone enlighten in understandable text for a novice?

Kernel updates within the same series (the series is the first part of the version number, e.g. 4.10, 4.13, or 4,15.) are always bug fixes (this includes security fixes). For your Mint 18, only the kernel series 4.4 and 4.15 are LTS (long-term support) releases and are still receiving updates. so you should be using one of those.

Kernels of a different series come with different features and hardware drivers. Unless you run into compatibility issues, I would generally suggest to use the newest available series (4.15).

If you ever run into a problem with a kernel, the GRUB boot menu allows you to select a different one under the advanced options (hold shift after the BIOS logo/screen to access the menu if it does not show by default). After you did that you can then just remove the problematic one via Update Manager.

[JerryF]

moving on slightly, I am never sure about kernel updates with dire warnings ,are they a security feature or just to enable more modern
apps could someone enlighten in understandable text for a novice?

Please don't 'hijack' someone else's post. Please start your own post.

[Foster]

Oh sorry I thought it was part & parcel of the same subject

[karlchen]

<moderator on>
Split off from this thread: I get Update Manager notifications for packages I don't have (18.3 Sylvia)
</moderator off>

[karlchen]

Hi, Foster.

Kernel Updates, which also fix security issues, will be presented by the Update Manager with a red excalamation mark next to their names. Also you can check by reading the changelog for an update in the lower pane of Update Manager.

Regards,
Karl

[Foster]

Thanks Karl I am never sure whether or not to allow the update as it is only described as kernel update with dire warnings about loss of wifi etc.

[JerryF]

Hi Foster,

If your machine is running well with the kernel series that you already have, I would stick with it. For example, I have 18.3 and have stayed with the 4.4 kernel series for my HP EliteBook. I believe the latest update was 4.4.131 in the 4.4 series.

When I did a reinstall of Mint onto a Dell laptop, I installed 18.3, but it installed kernel 4.13.xxx and that wasn't good for an older machine. The graphics was the problem. As soon as I installed a 4.4.xxx kernel (don't have the laptop to look at) and booted that kernel, the graphics problem was gone.

So, a newer kernel series is not always better.

[Foster]

my machines are far from new & I suppose the old adage " if its not broken dont fix it " could apply?

[JerryF]

Yep!

[gm10]

On the other hand, kernels are basically self-contained, if one doesn't work it's easy to switch back to the previous one as if it never happened (see my previous post), so no real harm in trying them out if you want to.

[karlchen]

For example, I have 18.3 and have stayed with the 4.4 kernel series for my HP EliteBook. I believe the latest update was 4.4.131 in the 4.4 series.

As my Mint 18.1 systems are running on older machines as well, I have started with and stayed with the kernel series 4.4.0 as well.
By the way: the most recent update for series 4.4.0 is K4.4.0-133(159). - And yes: it holds security fixes. Cf. USN-3741-1: Linux kernel vulnerabilities
And no, skipping the update is not the best idea.
With CPUs in all our machines, which are broken by design with respect to security, we will have to get used to receiving kernel updates, which fix the broken CPU behaviour, every 4 weeks or so.