I have a sarge box (fully updated as of 2 days ago) running the same version of ssh, and it honours the /etc/hosts.deny settings. Do you have any entries in /etc/hosts.allow?
Attachment: signature.asc Description: Digital signature