[3.10] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)

[3.10] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) #42678