This update for icu fixes the following security issues: - Passing a locale string longer than 255 characters to uloc_getDisplayName could have caused a buffer overflow resulting in denial of service or possible code execution .