Thanks to Dana for pointing out Debian just today released an update for this Gallery security hole.
For the stable distribution (woody) these problems have been fixed in version 1.2.5-8woody3.
For the unstable distribution (sid) these problems have been fixed in version 1.4.4-pl4-1.
We recommend that you upgrade your gallery package.
I'd assume all ya'll have already updated this, but if you're in debian, make sure you do your apt-get updates early and often!