curl/RELEASE-NOTES

Curl and libcurl 7.49.0

 Public curl releases:         154
 Command line options:         179
 curl_easy_setopt() options:   221
 Public functions in libcurl:  61
 Contributors:                 1364

This release includes the following changes:

 o schannel: Add ALPN support [2]
 o SSH: support CURLINFO_FILETIME
 o SSH: new CURLOPT_QUOTE command "statvfs" [5]
 o wolfssl: Add ALPN support [18]
 o http2: added --http2-prior-knowledge [16]
 o http2: added CURL_HTTP_VERSION_2_PRIOR_KNOWLEDGE [17]

This release includes the following bugfixes:

 o checksrc.bat: Updated the help to be consistent with generate.bat
 o openssl: fix ERR_remove_thread_state() for boringssl/libressl [1]
 o openssl: boringssl provides the same numbering as openssl
 o multi: fix "Operation timed out after" timer [3]
 o url: don't use bad offset in tld_check_name to show error [4]
 o sshserver.pl: use quotes for given options
 o Makefile.am: skip the scripts dir [6]
 o curl: warn for --capath use if not supported by libcurl [7]
 o http2: fix connection reuse [8]
 o GSS: make Curl_gss_log_error more verbose [9]
 o build-wolfssl: Allow a broader range of ciphers (Visual Studio)
 o wolfssl: Use ECC supported curves extension [10]
 o openssl: Fix compilation warnings
 o Curl_add_buffer_send: avoid possible NULL dereference
 o SOCKS5_gssapi_negotiate: don't assume little-endian ints
 o strerror: don't bit shift a signed integer [11]
 o url: Corrected get protocol family for FTP and LDAP
 o curl/mprintf.h: remove support for _MPRINTF_REPLACE
 o upload: missing rewind call could make libcurl hang [12]
 o IMAP: check pointer before dereferencing it [13]
 o build: Changed the Visual Studio projects warning level from 3 to 4
 o checksrc: now stricter, wider checks, code cleaned up
 o checksrc: added docs/CHECKSRC.md
 o curl_sasl: Fixed potential null pointer utilisation [14]
 o krb5_gssapi: Only process challenge when present
 o krb5: Fixed missing client response when mutual authentication enabled
 o krb5_sspi: Only process challenge when present
 o krb5: Only generate a SPN when its not known
 o formdata: use appropriate fopen() macros
 o curl.1: -w filename_effective was introduced in 7.26.0
 o http2: make use of the nghttp2 error callback [15]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Alexis La Goutte, Anatol Belski, Dan Cristian, Daniel Stenberg,
  David Benjamin, Diego Bes, Dusty Mabe, Evgeny Grin, Isaac Boukris,
  Joel Depooter, Juan RP, Marcel Raad, Marquis de Muesli, Michael Osipov,
  Ray Satiro, Steve Holme, Viktor Szakáts,
  (17 contributors)

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

 [1] = https://twitter.com/xtraemeat/status/712564874098917376
 [2] = https://curl.haxx.se/bug/?i=724
 [3] = https://curl.haxx.se/bug/?i=619
 [4] = https://curl.haxx.se/bug/?i=731
 [5] = https://curl.haxx.se/bug/?i=677
 [6] = https://curl.haxx.se/bug/?i=620
 [7] = https://curl.haxx.se/bug/?i=492
 [8] = https://curl.haxx.se/bug/?i=736
 [9] = https://curl.haxx.se/bug/?i=738
 [10] = https://github.com/wolfSSL/wolfssl/issues/366
 [11] = https://curl.haxx.se/bug/?i=744
 [12] = https://curl.haxx.se/bug/?i=741
 [13] = https://curl.haxx.se/bug/?i=747
 [14] = https://curl.haxx.se/bug/?i=745
 [15] = https://curl.haxx.se/bug/?i=722
 [16] = https://curl.haxx.se/docs/manpage.html#--http2-prior-knowledge
 [17] = https://curl.haxx.se/libcurl/c/CURLOPT_HTTP_VERSION.html
 [18] = https://curl.haxx.se/docs/http2.html