`tarfile.extractall(filter='data')` allows symlink escape through hardlink-extraction fallback

[StanFromIreland]

More details to follow - patience is bitter, but its fruit is sweet. ;-)

Linked PRs

• gh-151558: Fix symlink escape via tarfile hardlink-extraction fallback #151559
• [3.15] gh-151558: Fix symlink escape via tarfile hardlink-extraction fallback (GH-151559) #151997
• [3.14] gh-151558: Fix symlink escape via tarfile hardlink-extraction fallback (GH-151559) #151998
• [3.13] gh-151558: Fix symlink escape via tarfile hardlink-extraction fallback (GH-151559) #151999
• [3.12] gh-151558: Fix symlink escape via tarfile hardlink-extraction fallback (GH-151559) #152000
• [3.11] gh-151558: Fix symlink escape via tarfile hardlink-extraction fallback (GH-151559) #152001
• [3.10] gh-151558: Fix symlink escape via tarfile hardlink-extraction fallback (GH-151559) #152080