Hi, zoneminder has multiple CVEs open and it does not look pretty: http://seclists.org/bugtraq/2017/Feb/5
I think we have no choice but to end security support (or mark the issues as no-dsa and move the package ot limited security support like only run in trusted environments). Cheers, -- Guido