Most of the cases, those software are from Ubuntu repositories.. would Pop!_OS consider building their own, or as some other people mentioned, rebase on something else?
The current version of Pop is based on the 22.04 long term support version of Ubuntu. Its aim is stability, not bleeding edge.
Also - ubuntu back-ports security fixes to older packages. So that keepassxc is likely not vulnerable. The package version will be something like "2.6.6-ubuntu3" to indicate that.
You are "not" using a flatpak, but you should and it would solve all your problems. It's the way of the future even if you read some FUD about it online.
AFAIK pop! is not aimed to be a more cutting-edge distro like fedora. It is meant to provide a stable base with the up-to-date version of the software installed by a packaging format, like flatpak, appimagr, or snap.
If you dont want to use these packages, then you will need to face the tradeoff between the stablity of the base system vs using not up-to-date apps.
Why does it matter? What are you missing? Numbers on a screen? It's not that old. Everything works perfectly fine. Use Flatpak if you want the latest version of a desktop application.
i mostly worried about keepass for vulnerabibity and virt-manger not getting the latest qemu/libvirt update... but i agree to you, these package aren;t that old.
22.04 LTS will receive security updates until 2031. That's what the L in LTS means. Ubuntu backports security patches, and occasionally bug fixes, for their core, server, and enterprise customers. You can't compare Ubuntu versions of software because most of them contain patches.
I can easily assume you have no idea what LTS means. Nor apparently do you realize that we frequently update the core system software in Pop. Our kernel, firmware, and drivers are newer than what most Linux distributions have. Same goes for Pipewire, Lutris, Virtualbox, etc.
You always have the freedom of clone the src and compile the latest version yourself. Or if you want the package manager do the job, use distrobox and make an Arch container
They're spending all of their time and effort on cosmic. This is why I don't recommend Pop_os to anyone anymore, not until cosmic is complete and released to the public.
See the code of conduct on the side. Criticism must be constructive. This is not only false, but ridiculous. Half of my hours are spent on Pop!_OS packaging and community.
This is one of the reasons why I don't use or recommend Ubuntu or any of its downstream distros.
For major and well supported applications, older versions based off of LTS is perfectly fine.
But tons of stuff on Linux is just better to have latest stable or sometimes even bleeding edge. It would be really dumb for some brand new linux user to have to build from source because the feature or bugfix they want won't be added for another year.
And no, Flatpak is not an end all solution either (although pretty decent at countering this issue).
Probably the number one thing this applies to is gaming. Kernel modules, Proton, wine, their subsequent forks, Emulators, etc. Most of this stuff is already unstable so there's really no benefit to only having access to an older version.