Mandriva has issued an update for lha. This fixes a security issue, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges.

The security issue is caused due to LHA creating temporary files in an insecure manner. This can be exploited to read or write files by e.g. creating files before LHA is executed.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers