Debian Stretch VPS w Backports - python-acme Kept Back

[SlidingHorn]

I have a Debian VPS I use for web hosting, and I recently had to add the backports repo in order to get an updated version of certbot due to a security issue that kept it from issuing new certificates.

Tonight, I logged into the server to make sure there were no routine updates, and I was a little confused by the outcome:

Code: Select all

Linux server1 4.9.0-3-amd64 #1 SMP Debian 4.9.30-2+deb9u5 (2017-09-19) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Tue Mar 27 00:59:02 2018 from *.*.*.*
ryan@server1:~$ sudo apt update
[sudo] password for ryan:
Hit:1 http://security.debian.org stretch/updates InRelease
Ign:2 http://ftp.debian.org/debian stretch InRelease
Hit:3 http://ftp.debian.org/debian stretch-updates InRelease
Hit:4 http://ftp.debian.org/debian stretch-backports InRelease
Hit:5 http://ftp.debian.org/debian stretch Release
Reading package lists... Done
Building dependency tree
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.
ryan@server1:~$ apt list --upgradable -a
Listing... Done
python-acme/stretch-backports 0.21.1-1~bpo9+1 all [upgradable from: 0.19.0-1~bpo9+1]
python-acme/now 0.19.0-1~bpo9+1 all [installed,upgradable to: 0.21.1-1~bpo9+1]
python-acme/stable 0.10.2-1 all

ryan@server1:~$ sudo apt upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following package was automatically installed and is no longer required:
  python-augeas
Use 'sudo apt autoremove' to remove it.
The following packages have been kept back:
  python-acme
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.

1. Why would the update be kept back?

2. I know that apt is supposed to be intelligent enough to not remove anything that it shouldn't, but not being terribly knowledgeable of the inner workings of certbot, etc., I didn't want to 'autoremove' python-augeas and break it.

Any input / education anyone could lay upon me would be greatly appreciated! Thanks

[reinob]

1. Why would the update be kept back?

2. I know that apt is supposed to be intelligent enough to not remove anything that it shouldn't, but not being terribly knowledgeable of the inner workings of certbot, etc., I didn't want to 'autoremove' python-augeas and break it.

Any input / education anyone could lay upon me would be greatly appreciated! Thanks

Probably it needs to pull further/new packages. Use dist-upgrade for that.
I think with apt it's "full-upgrade", otherwise use "apt-get dist-upgrade".
You can add "-s" to the command to simulate first.