Hi team!

We decided we needed to ship a patch release to fix some of the mistakes that
slipped into the previous release, and when doing this we also include a
security fix for CVE-2016-4802 so check that out!

As always, download curl from:

   https://curl.haxx.se/

Curl and libcurl 7.49.1

  Public curl releases: 155
  Command line options: 185
  curl_easy_setopt() options: 224
  Public functions in libcurl: 61
  Contributors: 1404

This release includes the following bugfixes:

  o Windows: prevent DLL hijacking, CVE-2016-4802 [11]
  o dist: include manpage-scan.pl, nroff-scan.pl and CHECKSRC.md [1]
  o schannel: fix compile break with MSVC XP toolset [2]
  o curlbuild.h.dist: check __LP64__ as well to fix MIPS build [3]
  o dist: include curl_multi_socket_all.3 [4]
  o http2: use HTTP/2 in the HTTP/1.1-alike response
  o openssl: ERR_remove_thread_state() is deprecated in latest 1.1.0
  o CURLOPT_CONNECT_TO.3: user must not free the list prematurely [5]
  o libcurl.m4: Avoid obsolete warning [6]
  o winbuild/Makefile.vc: Fix check on SSL, MBEDTLS, WINSSL exclusivity [7]
  o curl_multibyte: fix compiler error
  o openssl: cleanup must free compression methods (memory leak) [8]
  o mbedtls: fix includes so snprintf() works [9]
  o checksrc.pl: Added variants of strcat() & strncat() to banned function list
  o contributors.sh: better grep pattern and show GitHub username [10]
  o ssh: fix build for libssh2 before 1.2.6 [12]
  o curl_share_setopt.3: Add min ver needed for ssl session lock [13]

This release includes the following known bugs:

  o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

   Alexander Traud, Daniel Stenberg, Gisle Vanem, Jan Ehrhardt,
   jveazey on github, Marcel Raad, Michael Kaufmann, Michael Wallner,
   Moti Avrahami, Paul Howarth, Ray Satiro, Steve Holme, Tomas Jakobsson,
   (13 contributors)

         Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

  [1] = https://curl.haxx.se/mail/lib-2016-05/0113.html
  [2] = https://curl.haxx.se/bug/?i=812
  [3] = https://curl.haxx.se/bug/?i=813
  [4] = https://curl.haxx.se/bug/?i=816
  [5] = https://curl.haxx.se/bug/?i=819
  [6] = https://curl.haxx.se/bug/?i=821
  [7] = https://curl.haxx.se/bug/?i=818
  [8] = https://curl.haxx.se/bug/?i=817
  [9] = https://curl.haxx.se/mail/lib-2016-05/0196.html
  [10] = https://curl.haxx.se/bug/?i=824
  [11] = https://curl.haxx.se/docs/adv_20160530.html
  [12] = https://curl.haxx.se/bug/?i=831
  [13] = https://github.com/curl/curl/issues/826

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-users
FAQ:        https://curl.haxx.se/docs/faq.html
Etiquette:  https://curl.haxx.se/mail/etiquette.html