I'm using MS XDR XMLs and MSXML 4.0 in my projects since 2002. In the past, there were security issues with MSXML 4.0 reported and fixed by Microsoft, last fixes released with the version MSXML 4.0 SP3. In release notes of the latter following is stated:"Both MSXML 4.0 SP2 and SP3 are entering maintenance mode now, therefore no new functionality and performance improvement will be made in MSXML 4.0, servicing will be restricted to high impact security issues. There are no plans for future MSXML 4.0 service packs." For my understanding, this means following: a) there're no new known issues for the MSXML 4.0 SP3; b) If there will emerge any security issue, Microsoft will address it (quoting from the release notes: "servicing will be restricted to high impact security issues");
Therefore, my software using MSXML 4.0 SP3 doesn't necessarily require costly reengineering resulting from a migration of the software from the MSXML 4.0 SP3 to the MSXML 6.0.
My customers would like to have a clear statement from Microsoft regarding this, as the release notes I am referring to is 4 years old. Is the statement "servicing will be restricted to high impact security issues" still standing for the MSXML4.0 SP3?