"gNewSense is based on Debian stable"
Sadly, that's not true. The latest stable release "Gnewsense 3.0 'parks'" is
based on Debian squeeze, which is oldstable.
The current stable version is "wheezy" and afaik the new version of Gnewsense
will be based on it.
Sounds like good news at first, but i'm afraid that the testing version of
Debian ("Jessie") is already frozen, so it won't take such a long time until
it becomes stable; maybe gnewsense 4.0 won't even be released by that time,
so the equation will remain the same:
current gnewsense is based on outdated debian;
Since Debian stable is already what I consider the oldest still acceptable
software, Gnewsense isn't an option - at least for me.
I don't know anything about the security policy of gnewsense or what happens
when its basis becomes "old old stable" and loses security support by debian.
I'm sceptical about this.