ganglia-web - Debian Package Tracker

general

source: ganglia-web (main)
version: 3.7.6+debian-1.1
maintainer: Marcos Fouces (DMD)
arch: all
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.7.5+debian-3
oldstable: 3.7.5+debian-4
old-bpo: 3.7.6+debian-1~bpo12+1
stable: 3.7.6+debian-1.1
testing: 3.7.6+debian-1.1
unstable: 3.7.6+debian-1.1

versioned links

3.7.5+debian-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7.5+debian-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7.6+debian-1~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7.6+debian-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ganglia-webfrontend (6 bugs: 0, 5, 1, 0)

action needed

A new upstream version is available: 3.7.7 high

A new upstream version 3.7.7 is available, you should consider packaging it.

Created: 2025-11-27 Last update: 2026-09-15 04:03

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2024-52762: A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter.
CVE-2024-52763: A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" parameter.

Created: 2024-11-21 Last update: 2026-09-01 22:00

2 security issues in forky high

There are 2 open security issues in forky.

2 important issues:

CVE-2024-52762: A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter.
CVE-2024-52763: A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" parameter.

Created: 2025-08-09 Last update: 2026-09-01 22:00

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 3.7.7+debian-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 0addcf23cbc6276f444970533830ba6f4adc4eba
Author: Marcos Fouces <marcos@debian.org>
Date:   Mon Sep 14 18:33:27 2026 +0200

    New upstream release 3.7.7.

commit d35f7904d7cb4eb1b2eb173fd18ca9e15d454826
Merge: f316022 f35652d
Author: Marcos Fouces <marcos@debian.org>
Date:   Mon Sep 14 18:29:54 2026 +0200

    Update upstream source from tag 'upstream/3.7.7+debian'
    
    Update to upstream version '3.7.7+debian'
    with Debian dir ed8ad9aba24c059960935bb75d46b154435d6afa

commit f35652df64fd1b7a8fc3d41b3e02e775b0b42af4
Author: Marcos Fouces <marcos@debian.org>
Date:   Mon Sep 14 18:29:53 2026 +0200

    New upstream version 3.7.7+debian

commit f3160227716991fc247d13eee8fd8d046d6ba21a
Author: Marcos Fouces <marcos@debian.org>
Date:   Mon Sep 14 18:28:48 2026 +0200

    Clean, polish, remove redundancies in d/*.{postinst}{postrm}.

commit 34078706733fd64e7190d16406ecf67e048d2ab5
Author: Marcos Fouces <marcos@debian.org>
Date:   Thu Sep 10 23:53:07 2026 +0200

    +  * Remove d/ganglia-webfrontend.dirs. All needed dirs are created by installation commands.

commit c7c9fd55b32db195b13c1d6c2d2b8d8781ae6e9d
Author: Marcos Fouces <marcos@debian.org>
Date:   Thu Sep 10 23:50:50 2026 +0200

    Clean and polish d/rules. Remove historical and/or redundant instructions.

commit 8a7417ba00dde74b96b17f00d62cc7abdbcb9e7f
Author: Marcos Fouces <marcos@debian.org>
Date:   Thu Sep 10 23:28:48 2026 +0200

    Do not chown destination directory from Makefile.

https://salsa.debian.org/api/v4/projects/debian%2Fganglia-web API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2025-01-09 Last update: 2026-09-14 17:49

2 low-priority security issues in trixie low

There are 2 open security issues in trixie.

2 issues left for the package maintainer to handle:

CVE-2024-52762: (postponed; to be fixed through a stable update) A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter.
CVE-2024-52763: (postponed; to be fixed through a stable update) A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" parameter.

You can find information about how to handle these issues in the security team's documentation.

Created: 2025-08-09 Last update: 2026-09-01 22:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.6.2).

Created: 2024-04-07 Last update: 2026-03-31 15:01

news

[rss feed]

[2026-02-01] ganglia-web 3.7.6+debian-1.1 MIGRATED to testing (Debian testing watch)
[2026-01-31] ganglia-web REMOVED from testing (Debian testing watch)
[2025-01-14] ganglia-web 3.7.6+debian-1.1 MIGRATED to testing (Debian testing watch)
[2025-01-08] Accepted ganglia-web 3.7.6+debian-1.1 (source) into unstable (Niels Thykier)
[2024-11-15] Accepted ganglia-web 3.7.6+debian-1~bpo12+1 (source all) into stable-backports (Debian FTP Masters) (signed by: Christoph Martin)
[2024-03-17] ganglia-web 3.7.6+debian-1 MIGRATED to testing (Debian testing watch)
[2024-03-10] Accepted ganglia-web 3.7.6+debian-1 (source) into unstable (Marcos Fouces)
[2023-09-27] ganglia-web 3.7.5+debian-4 MIGRATED to testing (Debian testing watch)
[2023-09-27] ganglia-web 3.7.5+debian-4 MIGRATED to testing (Debian testing watch)
[2023-09-10] ganglia-web REMOVED from testing (Debian testing watch)
[2022-01-13] ganglia-web 3.7.5+debian-4 MIGRATED to testing (Debian testing watch)
[2021-12-28] Accepted ganglia-web 3.7.5+debian-4 (source) into unstable (Marcos Fouces)
[2021-12-09] ganglia-web REMOVED from testing (Debian testing watch)
[2021-03-10] ganglia-web 3.7.5+debian-3 MIGRATED to testing (Debian testing watch)
[2021-02-28] Accepted ganglia-web 3.7.5+debian-3 (source) into unstable (Marcos Fouces)
[2020-11-27] ganglia-web 3.7.5+debian-2 MIGRATED to testing (Debian testing watch)
[2020-11-27] ganglia-web 3.7.5+debian-2 MIGRATED to testing (Debian testing watch)
[2020-11-21] Accepted ganglia-web 3.7.5+debian-2 (source) into unstable (Marcos Fouces)
[2020-10-09] ganglia-web 3.7.5+debian-1 MIGRATED to testing (Debian testing watch)
[2020-10-03] Accepted ganglia-web 3.7.5+debian-1 (source) into unstable (Marcos Fouces)
[2020-05-11] ganglia-web 3.6.1-3.1 MIGRATED to testing (Debian testing watch)
[2020-05-05] Accepted ganglia-web 3.6.1-3.1 (source) into unstable (Tobias Frost)
[2016-07-12] ganglia-web 3.6.1-3 MIGRATED to testing (Debian testing watch)
[2016-07-07] Accepted ganglia-web 3.6.1-3 (source all) into unstable (Daniel Pocock)
[2016-05-28] ganglia-web 3.6.1-2 MIGRATED to testing (Debian testing watch)
[2016-05-23] Accepted ganglia-web 3.6.1-2 (source all) into unstable (Daniel Pocock)
[2016-05-21] ganglia-web REMOVED from testing (Debian testing watch)
[2014-04-23] ganglia-web 3.6.1-1 MIGRATED to testing (Debian testing watch)
[2014-04-04] Accepted ganglia-web 3.6.1-1 (source all) (Daniel Pocock)
[2014-02-18] ganglia-web REMOVED from testing (Debian testing watch)

bugs [bug history graph]

all: 8
RC: 0
I&N: 7
M&W: 1
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.7.6+debian-1.1build1
2 bugs (1 patch)