(In reply to Dave Love from comment #0)
> Description of problem:
> 
> The release notes for ganglia-web 3.7.2 say it fixes an XSS issue.
> http://ganglia.info/?p=619
> 
> Version-Release number of selected component (if applicable):
> 
> ganglia-web-3.7.1-2

Hi David,

According to my information ganglia in Epel-6 should already be at version 3.7.2

fedora:epel:6/ganglia-3.7.2-2.el6

Are you seeing something different?

(In reply to Andrej Nemec from comment #1)

> According to my information ganglia in Epel-6 should already be at version
> 3.7.2

But the ganglia-web component isn't.  (I don't think it's el6-specific.)

$ rpm -qlp `yumdownloader --source --urls ganglia|&tail -1`
conf.php
ganglia-3.7.2.tar.gz
ganglia-httpd.conf.d
ganglia-httpd24.conf.d
ganglia-web-3.5.7-statedir.patch
ganglia-web-3.7.1.tar.gz
ganglia.spec
gmetad.service
gmond.service

(In reply to Dave Love from comment #2)
> (In reply to Andrej Nemec from comment #1)
> 
> > According to my information ganglia in Epel-6 should already be at version
> > 3.7.2
> 
> But the ganglia-web component isn't.  (I don't think it's el6-specific.)
> 
> $ rpm -qlp `yumdownloader --source --urls ganglia|&tail -1`
> conf.php
> ganglia-3.7.2.tar.gz
> ganglia-httpd.conf.d
> ganglia-httpd24.conf.d
> ganglia-web-3.5.7-statedir.patch
> ganglia-web-3.7.1.tar.gz
> ganglia.spec
> gmetad.service
> gmond.service

Ok,

I have created a security flaw and trackers for this issue. Thanks for the report! I will close this flaw now.

*** This bug has been marked as a duplicate of bug 1369844 ***