The version of tinyxml in presage is 12 years old, and although there have not been upstream new releases, some CVEs in it have been patched in distros. It would be good to remove it from the sources, unless there are reasons to keep it.
It would make sense to remove it then. For SFOS we may have to package it, but that should be possible and would allow us to use patched versions from the distributions
The version of tinyxml in presage is 12 years old, and although there have not been upstream new releases, some CVEs in it have been patched in distros. It would be good to remove it from the sources, unless there are reasons to keep it.
I can submit a PR to remove tinyxml, if it is OK.