lha was updated to fix one security issue.
This security issue was fixed:
{ "binaries": [ { "lha": "1.14.0.894-3.1" } ] }
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:1904-1.json"