Flaw found in Lhasa makes for compression confession depression

Don't be a .LZA-boy - patch and consider where you decompress

Cisco's Talos team has found a vulnerability in the Lhasa LZH/LHA decompression tool and library, and it's a nasty one because it means the decompression process gives attackers the chance to put whatever code they want on your machine."