[3.11] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027)

[3.11] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) #162125