ensure => latest  use apt-cache policy to determine the newest version. if you use install_options -t wheezy-backports it is helpful to pass this to this command too.