Merge retrospective 4.08 release into HEAD

Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

diff --cc www/changelog.xml
index fe87c01dc5d3be887ea62af729e87aefd624980c,9eba93f4a3c373762c7787fbc8ad5bebefbe18e4..4abfedf7c61f2f362f6787f9e79aaf2c8d1be992
--- 1/www/changelog.xml
--- 2/www/changelog.xml
+++ b/www/changelog.xml
@@@ -17,17 -17,15 +17,24 @@@
  <ul>
     <li><b>OpenConnect HEAD</b>
       <ul>
 -       <li><i>No changelog entries yet</i></li>
 +       <li>Use GnuTLS by default instead of OpenSSL.</li>
 +       <li>Avoid using deprecated <tt>gnutls_pubkey_verify_data()</tt> function..</li>
 +     </ul><br/>
 +  </li>
 +  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.99.tar.gz">OpenConnect v4.99</a></b>
 +     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.99.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-07
 +     <ul>
 +       <li>Add <tt>--os</tt> switch to report a different OS type to the gateway.</li>
 +       <li>Support new XML POST format.</li>
-        <li>Fix buffer overflow on long <tt>Location:</tt> and <tt>Set-Cookie:</tt> headers sent from server.</li>
 +       <li>Add SecurID token support using <a href="http://stoken.sourceforge.net/">libstoken</a>.</li>
+      </ul><br/>
+   </li>
+   <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz">OpenConnect v4.08</a></b>
+      <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-13
+      <ul>
+        <li>Fix overflow on HTTP request buffers (CVE-2012-6128)</li>
+        <li>Fix connection to servers with round-robin DNS with two-stage auth/connect.</li>
+        <li>Impose minimum MTU of 1280 bytes.</li>
         <li>Fix some harmless issues reported by Coverity.</li>
         <li>Improve <tt>"Attempting to connect..."</tt> message to be explicit when it's connecting to a proxy.</li>
       </ul><br/>