A security issue was discovered in all versions of gallery from 1.2 to 1.4.3pl1. The team has made an updated release which corrects to problem. They advise all users to upgrade to this pl2 release.
You can find it here: http://sourceforge.net/project/showfiles.php?group_id=7130