Hi,
zoneminder has multiple CVEs open and it does not look pretty:
http://seclists.org/bugtraq/2017/Feb/5
I think we have no choice but to end security support (or mark the
issues as no-dsa and move the package ot limited security support like
only run in trusted environments).
Cheers,
-- Guido