tremor: svn-17866 -> git-562307a

This updates tremor to a newer version and it's new home in a git
repository. It hasn't been updated since 2011 and is used as a build
input for other packages.

Also fixes CVE-2018-5146 [1].

[1] http://seclists.org/oss-sec/2018/q1/243