Security vulnerability pre-announcement: 20170117

The full details are at https://plone.org/security/announcements/20170117-preannounce