* SECURITY UPDATE: arbitrary code execution via crafted BMP file
  - debian/patches/04_security_CVE-2009-1570.patch: validate bit depths,
    width and height in plug-ins/file-bmp/bmp-read.c.
  - CVE-2009-1570
* SECURITY UPDATE: arbitrary code execution via crafted PSD file
  - debian/patches/05_security_CVE-2009-3909.patch: protect against
    integer overflows in plug-ins/file-psd/{psd.h,psd-load.c}.
  - CVE-2009-3909