Prevent directory traversal in locale-related environment variables (CVE-2014-0475).
mentioned in commit ac39af9f