Mac OS X PHP developers, listen up - Greg Beaver has a word of advice for you about your default PEAR installation:
I won't get into the questionable business practice of shipping software with known security holes that have had known fixes for years. Instead, I would like to offer simple step-by-step instructions of how to upgrade from outdated buggy PEAR versions to the latest stable release, 1.5.0.
You're five simple steps away from having an upgraded installation, all using the built-in pear installer and go-pear functionality.