Re: [Trisquel-users] GnuPGP for Trisquel out of date

[jason]

Yes there is always a reason for everything. Package versions are frozen on  
the release of a given version of Trisquel. Other distros, like Debian, do  
the same with their stable releases. Security and bug fixes can be applied by  
applying specific fixes the overall version number remains the same. This is  
done for stability purposes. You can know that updates are safe to apply and  
won't result in API/ABI changes or other problems. This also means the the  
2.1.11 you get in Trisquel is not exactly the same as 2.1.11 from gnupg.org  
because it will have been modified to fix any bug or security problems that  
may have existed in that version. An easy way to tell is, for example,  
https://packages.ubuntu.com/search?suite=xenial&section=all&arch=any&keywords=gnupg2&searchon=names  
can you can see it's in the [security] component, indicating security-related  
changes have been made.