Changes in 7.49.1 - May 30 2016

Bugfixes:

• Windows: prevent DLL hijacking, CVE-2016-4802
• dist: include manpage-scan.pl, nroff-scan.pl and CHECKSRC.md
• schannel: fix compile break with MSVC XP toolset
• curlbuild.h.dist: check __LP64__ as well to fix MIPS build
• dist: include curl_multi_socket_all.3
• http2: use HTTP/2 in the HTTP/1.1-alike response
• openssl: ERR_remove_thread_state() is deprecated in latest 1.1.0
• CURLOPT_CONNECT_TO.3: user must not free the list prematurely
• libcurl.m4: Avoid obsolete warning
• winbuild/Makefile.vc: Fix check on SSL, MBEDTLS, WINSSL exclusivity
• curl_multibyte: fix compiler error
• openssl: cleanup must free compression methods (memory leak)
• mbedtls: fix includes so snprintf() works
• checksrc.pl: Added variants of strcat() & strncat() to banned function list
• contributors.sh: better grep pattern and show GitHub username
• ssh: fix build for libssh2 before 1.2.6
• curl_share_setopt.3: Add min ver needed for ssl session lock

Further