diff --git a/www/nginx-devel/Makefile b/www/nginx-devel/Makefile
index 1764168b129e..f9fd7184505d 100644
--- a/www/nginx-devel/Makefile
+++ b/www/nginx-devel/Makefile
@@ -612,7 +612,7 @@ CONFIGURE_ARGS+=--add-module=${WRKDIR}/openresty-memc-nginx-module-${GIT_MEMC_VE
 .endif
 
 .if ${PORT_OPTIONS:MMODSECURITY}
-NGINX_MODSECURITY_VERSION=	2.8.0
+NGINX_MODSECURITY_VERSION=	2.9.0
 LIB_DEPENDS+=	libpcre.so:${PORTSDIR}/devel/pcre \
 		libapr-1.so:${PORTSDIR}/devel/apr1 \
 		libcurl.so:${PORTSDIR}/ftp/curl \
diff --git a/www/nginx-devel/distinfo b/www/nginx-devel/distinfo
index 447b2d1ed183..9974aef821ed 100644
--- a/www/nginx-devel/distinfo
+++ b/www/nginx-devel/distinfo
@@ -68,8 +68,8 @@ SHA256 (openresty-lua-nginx-module-v0.9.4-0-g6169a19.tar.gz) = 4d869650d03a76d28
 SIZE (openresty-lua-nginx-module-v0.9.4-0-g6169a19.tar.gz) = 470182
 SHA256 (openresty-memc-nginx-module-v0.14-0-gde4cf86.tar.gz) = b60fed5921a0c19c6ffe71e5c764193283dbe635bb3bad6febd6655f94a633e9
 SIZE (openresty-memc-nginx-module-v0.14-0-gde4cf86.tar.gz) = 37756
-SHA256 (modsecurity-2.8.0.tar.gz) = 5cbbc7fc993d39106b653213753d25c4ec21771eee17b01b69122ccf3f73460e
-SIZE (modsecurity-2.8.0.tar.gz) = 3940357
+SHA256 (modsecurity-2.9.0.tar.gz) = e2bbf789966c1f80094d88d9085a81bde082b2054f8e38e0db571ca49208f434
+SIZE (modsecurity-2.9.0.tar.gz) = 4246467
 SHA256 (naxsi-core-0.50.tgz) = 7cece5f9d9c5df9e09af1e1023bc8e04bbbbe953e67461b893b8240e82ca52ef
 SIZE (naxsi-core-0.50.tgz) = 49809
 SHA256 (passenger-4.0.59.tar.gz) = 8b4756564a5133dc97425883d15d1ba1c9f6566c79e92794dc3e1f5b749238ae
diff --git a/www/nginx-devel/files/extra-patch-nginx-modsecurity-configure b/www/nginx-devel/files/extra-patch-nginx-modsecurity-configure
index 92e5aac2e6da..ffbc3eb36687 100644
--- a/www/nginx-devel/files/extra-patch-nginx-modsecurity-configure
+++ b/www/nginx-devel/files/extra-patch-nginx-modsecurity-configure
@@ -1,5 +1,5 @@
---- ../modsecurity-2.8.0/configure.orig	2014-04-15 16:44:15.000000000 +0400
-+++ ../modsecurity-2.8.0/configure	2014-08-10 21:24:00.000000000 +0400
+--- ../modsecurity-2.9.0/configure.orig	2014-04-15 16:44:15.000000000 +0400
++++ ../modsecurity-2.9.0/configure	2014-08-10 21:24:00.000000000 +0400
 @@ -14664,7 +14664,7 @@
    no) :
      test_paths= ;; #(
diff --git a/www/nginx/Makefile b/www/nginx/Makefile
index e7befa66ad29..ff8361a045e7 100644
--- a/www/nginx/Makefile
+++ b/www/nginx/Makefile
@@ -625,7 +625,7 @@ CONFIGURE_ARGS+=--add-module=${WRKDIR}/openresty-memc-nginx-module-${GIT_MEMC_VE
 .endif
 
 .if ${PORT_OPTIONS:MMODSECURITY}
-NGINX_MODSECURITY_VERSION=	2.8.0
+NGINX_MODSECURITY_VERSION=	2.9.0
 LIB_DEPENDS+=	libpcre.so:${PORTSDIR}/devel/pcre \
 		libapr-1.so:${PORTSDIR}/devel/apr1 \
 		libcurl.so:${PORTSDIR}/ftp/curl \
diff --git a/www/nginx/distinfo b/www/nginx/distinfo
index 1fc98cf0eb66..dcf55f200ffb 100644
--- a/www/nginx/distinfo
+++ b/www/nginx/distinfo
@@ -70,8 +70,8 @@ SHA256 (openresty-lua-nginx-module-v0.9.4-0-g6169a19.tar.gz) = 4d869650d03a76d28
 SIZE (openresty-lua-nginx-module-v0.9.4-0-g6169a19.tar.gz) = 470182
 SHA256 (openresty-memc-nginx-module-v0.14-0-gde4cf86.tar.gz) = b60fed5921a0c19c6ffe71e5c764193283dbe635bb3bad6febd6655f94a633e9
 SIZE (openresty-memc-nginx-module-v0.14-0-gde4cf86.tar.gz) = 37756
-SHA256 (modsecurity-2.8.0.tar.gz) = 5cbbc7fc993d39106b653213753d25c4ec21771eee17b01b69122ccf3f73460e
-SIZE (modsecurity-2.8.0.tar.gz) = 3940357
+SHA256 (modsecurity-2.9.0.tar.gz) = e2bbf789966c1f80094d88d9085a81bde082b2054f8e38e0db571ca49208f434
+SIZE (modsecurity-2.9.0.tar.gz) = 4246467
 SHA256 (naxsi-core-0.50.tgz) = 7cece5f9d9c5df9e09af1e1023bc8e04bbbbe953e67461b893b8240e82ca52ef
 SIZE (naxsi-core-0.50.tgz) = 49809
 SHA256 (passenger-4.0.59.tar.gz) = 8b4756564a5133dc97425883d15d1ba1c9f6566c79e92794dc3e1f5b749238ae
diff --git a/www/nginx/files/extra-patch-nginx-modsecurity-configure b/www/nginx/files/extra-patch-nginx-modsecurity-configure
index 92e5aac2e6da..ffbc3eb36687 100644
--- a/www/nginx/files/extra-patch-nginx-modsecurity-configure
+++ b/www/nginx/files/extra-patch-nginx-modsecurity-configure
@@ -1,5 +1,5 @@
---- ../modsecurity-2.8.0/configure.orig	2014-04-15 16:44:15.000000000 +0400
-+++ ../modsecurity-2.8.0/configure	2014-08-10 21:24:00.000000000 +0400
+--- ../modsecurity-2.9.0/configure.orig	2014-04-15 16:44:15.000000000 +0400
++++ ../modsecurity-2.9.0/configure	2014-08-10 21:24:00.000000000 +0400
 @@ -14664,7 +14664,7 @@
    no) :
      test_paths= ;; #(