component/nginx: add a patch for CVE-2017-7529.

http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html

component/nginx/buildout.cfg

@@ -4,6 +4,7 @@ extends =
   ../git/buildout.cfg
   ../libexpat/buildout.cfg
   ../openssl/buildout.cfg
+  ../patch/buildout.cfg
   ../pcre/buildout.cfg
   ../zlib/buildout.cfg
 
@@ -13,6 +14,10 @@ parts = nginx-output
 recipe = slapos.recipe.cmmi
 url = http://nginx.org/download/nginx-1.10.1.tar.gz
 md5sum = 088292d9caf6059ef328aa7dda332e44
+patch-options = -p0
+patch-binary = ${patch:location}/bin/patch
+patches =
+  http://nginx.org/download/patch.2017.ranges.txt#40bf9f37c881cb3b10cfefd84ca92f6a
 
 [nginx]
 <= nginx-common