[3.12] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)

[3.12] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) #194155