[3.9] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)

[3.9] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) #42682