[ANNOUNCEMENT] PEAR-1.5.4 (stable) Released.

The new PEAR package PEAR-1.5.4 (stable) has been released at http://pear.php.net/.

Release notes
-------------
MAJOR SECURITY BUGFIX RELEASE
arbitrary file execution
see http://pear.php.net/news/vulnerability2.php
* Fix Bug #10865: using --packagingroot regression [tias/cellog]
* Fix Bug #10873: pear channel-discover broken - pear temp directories not writeable [cellog]

Package Info
------------
The PEAR package contains:
* the PEAR installer, for creating, distributing
and installing packages
* the PEAR_Exception PHP5 error handling mechanism
* the PEAR_ErrorStack advanced error handling mechanism
* the PEAR_Error error handling mechanism
* the OS_Guess class for retrieving info about the OS
where PHP is running on
* the System class for quick handling of common operations
with files and directories
* the PEAR base class

New features in a nutshell:
* full support for channels
* pre-download dependency validation
* new package.xml 2.0 format allows tremendous flexibility while maintaining BC
* support for optional dependency groups and limited support for sub-packaging
* robust dependency support
* full dependency validation on uninstall
* remote install for hosts with only ftp access - no more problems with
restricted host installation
* full support for mirroring
* support for bundling several packages into a single tarball
* support for static dependencies on a url-based package
* support for custom file roles and installation tasks

NOTE: users of PEAR_Frontend_Web/PEAR_Frontend_Gtk must upgrade their installations
to the latest version, or PEAR will not upgrade properly

Related Links
-------------
Package home: http://pear.php.net/package/PEAR
Changelog: http://pear.php.net/package/PEAR/download/1.5.4
Download: http://download.pear.php.net/package/PEAR-1.5.4.tgz

Authors
-------
Greg Beaver (lead)
Tim Jackson (helper)
bertrand Gugger <bertrand@toggg.com> (helper)
Tias Guns (developer)