Security vulnerability pre-announcement: 20161129

The full details are at https://plone.org/security/announcements/20161129-preannounce