"packages have been kept back" usually indicates some dependency issue that caused apt to not fully upgrade the system.
The commandline to find these logs is:
COMMAND='grep -E "packages have been kept back"'
Affected packages in stretch2buster: 2