(Closes: #895472, CVE-2018-9838)

Update to upstream version '4.08.0'
with Debian dir 5262782490e5aa1c3027dcc0dfb420ea7c233db0

Deleted patches:
- Pass-no-relax-to-ld-on-alpha (broken)
- Call-ld-with-proper-flags (broken)
- Avoid-multiple-declarations-in-generated-.c-files-in (broken)
- Embed-bytecode-in-C-object-when-using-custom (broken)
- Native-backtraces-don-t-work-on-powerpc-and-sparc (broken)
- XL-001-tests.asmcomp (upstream)
- arm64-hide-symbols-for-stricter-binutils (upstream)
- Integer-overflows-when-unmarshaling-a-bigarray (upstream)
- Use-CCLINKFLAGS-for-linking-all-executables-and-shar (broken)
- Compute-a-stable-name-for-preprocessed-files (broken)