Comment by denhamparry

It is unlikely to have the bug as it sees more use, but it is worth checking. There have been previous CVEs with Pythons tar module.