bump nginx per CVE

http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html