reallyenglish/freebsd-ports — pull request #48 by trombik (2013-05-17 02:55:15+00:00)
Title: Security update to latest versions, sync with HEAD (from nginx 1.2.7 to 1.4.1)

o) www/nginx from 1.4.0 to 1.4.1;
o) www/nginx-devel from 1.4.0 to 1.5.0.

*) Security: a stack-based buffer overflow might occur in a worker
process while handling a specially crafted request, potentially
resulting in arbitrary code execution (CVE-2013-2028); the bug had
appeared in 1.3.9.

Thanks to Greg MacManus, iSIGHT Partners Labs.