Adam Spiers said:

     The following packages have been kept back:
       openssh-client openssh-server openssh-sftp-server ssh
     0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.

But *why* was it kept back?!  This is a good example of how (in my
experience, at least) apt's behaviour is often pretty difficult to
follow. 

Ubuntu? It has an annoying habit doing this, with the excuse that they stage updates so that if there's an issue, only a few people are affected. 

Using aptitude to do upgrades gets them ASAP when apt / apt-get talk about them being held back. 

Here, webmin sets up the cron job to check for updates every hour. 

Ian