I would use synaptic, making sure that the default setting is for "Smart Update" (or smart upgrade, can't remember). This is not as safe as apt-get but close.

You probably have a bunch more updates that are not coming to you because of the lack of the new kernal (31-13.43).