Hi Daniel,
The fix for the CVE-2014-0191 broke the --postvalid option. In that case, DTDs
are not loaded even though requested on the command line. This was the
CVE-2014-0191 patch:
https://git.gnome.org/browse/libxml2/commit/?id=9cd1c3cfbd32655d60572c0a413e017260c854df
With --postvalid spec
[More investigation follows. Writing from a different machine, so cannot reply
to my own
email]
The issue, brief summary: upgrade of libxml2 from 2.7.6-14.el6 to
2.7.6-14.el6_5.1 (RHEL6)
broke the --postvalid/--dtdvalid options.
Minimal test case:
[a.xml]
[a.dtd]
%base.dtd;
[b.d