diff -Nru ganglia-3.3.8/debian/changelog ganglia-3.3.8/debian/changelog
--- ganglia-3.3.8/debian/changelog	2012-08-30 12:45:44.000000000 -0400
+++ ganglia-3.3.8/debian/changelog	2013-03-17 14:53:42.000000000 -0400
@@ -1,3 +1,11 @@
+ganglia (3.3.8-1+nmu1) unstable; urgency=medium
+
+  * Non-maintainer upload by the Security Team.
+  * Add a README.Debian.security file discussing limited security support for
+    this package (closes: #702775). 
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 17 Mar 2013 18:52:40 +0000
+
 ganglia (3.3.8-1) unstable; urgency=low
 
   * Check URL arguments thoroughly (Closes: #683584)
diff -Nru ganglia-3.3.8/debian/README.Debian.security ganglia-3.3.8/debian/README.Debian.security
--- ganglia-3.3.8/debian/README.Debian.security	1969-12-31 19:00:00.000000000 -0500
+++ ganglia-3.3.8/debian/README.Debian.security	2013-03-17 14:57:35.000000000 -0400
@@ -0,0 +1,12 @@
+The Debian security team has decided that security support for ganglia
+will be limited only to installations behind a trusted HTTP zone.  Thus,
+any problems affecting this package in non-trusted zones will be treated
+as a non-issue (updated packages and security announcements will not be
+provided).
+
+This software was written under the expectation that it be used in a
+local cluster environtment, and thus the security consequences of
+exposing various interfaces to the wider untrusted internet were not
+fully considered, and are consequently not handled well. The security
+team does not have the time or resources to compensate for these
+upstream limitations.