diff --git a/configure.ac b/configure.ac
index a7ef5020..038b89e5 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-AC_INIT(openconnect, 4.07)
+AC_INIT(openconnect, 4.08)
 PKG_PROG_PKG_CONFIG
 AC_LANG_C
 AC_CANONICAL_HOST
diff --git a/version.sh b/version.sh
index 2ff00c89..ace4c5d8 100755
--- a/version.sh
+++ b/version.sh
@@ -1,6 +1,6 @@
 #!/bin/sh
 
-v="v4.07"
+v="v4.08"
 
 if [ -d .git ] && tag=`git describe --tags`; then
 	v="$tag"
diff --git a/www/changelog.xml b/www/changelog.xml
index f7463ae7..9eba93f4 100644
--- a/www/changelog.xml
+++ b/www/changelog.xml
@@ -16,6 +16,12 @@
 <a href="http://git.infradead.org/users/dwmw2/openconnect.git">gitweb</a>.</p>
 <ul>
    <li><b>OpenConnect HEAD</b>
+     <ul>
+       <li><i>No changelog entries yet</i></li>
+     </ul><br/>
+  </li>
+  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz">OpenConnect v4.08</a></b>
+     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-13
      <ul>
        <li>Fix overflow on HTTP request buffers (CVE-2012-6128)</li>
        <li>Fix connection to servers with round-robin DNS with two-stage auth/connect.</li>
diff --git a/www/download.xml b/www/download.xml
index eb3ab68a..96ed659b 100644
--- a/www/download.xml
+++ b/www/download.xml
@@ -19,12 +19,15 @@
 
 <p>
 <!-- latest-release-start -->
-The latest release is <a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.07.tar.gz">OpenConnect v4.07</a>
-<i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.07.tar.gz.asc">PGP signature</a>)</i>,
-released on 2012-08-31 with the following changelog:</p>
+The latest release is <a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz">OpenConnect v4.08</a>
+<i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz.asc">PGP signature</a>)</i>,
+released on 2013-02-13 with the following changelog:</p>
      <ul>
-       <li>Fix segmentation fault when invoked with <tt>-p</tt> argument.</li>
-       <li>Fix handling of write stalls on CSTP (TCP) socket.</li>
+       <li>Fix overflow on HTTP request buffers (CVE-2012-6128)</li>
+       <li>Fix connection to servers with round-robin DNS with two-stage auth/connect.</li>
+       <li>Impose minimum MTU of 1280 bytes.</li>
+       <li>Fix some harmless issues reported by Coverity.</li>
+       <li>Improve <tt>"Attempting to connect..."</tt> message to be explicit when it's connecting to a proxy.</li>
      </ul>
 <!-- latest-release-end -->