The NGINX advisory is here: http://mailman.nginx.org/pipermail/nginx-announce/2013/00011...

This is almost 2 months old.