Additional information:
the Web browser is an exception (it is updated soon after the related Firefox
release);
one can enable (e.g., using the "Updates" tab of "Software & Updates" in the
"System settings") the "backport" section of the repository to get newer
versions of some packages (not KeePassX though)
Trisquel proposes LTS enablement stacks (for the kernel and the graphical
stack).
And, of course, it is possible to install software from third parties (PPA,
compilation from source code, etc.). At your own risks.