A Senate report said Saturday that drug maker GlaxoSmithKline knew of possible heart attack risks tied to Avandia, its diabetes medication, years before such evidence became public.