3.14 compatibility in tarlib

[mcepl]

/usr/lib/python3.13/site-packages/metaextract/utils.py:48:
DeprecationWarning: Python 3.14 will, by default, filter
extracted tar archives and reject files or modify their
metadata. Use the filter argument to control this behavior.

We should probably limit the version of metaextract we use?

[danigm]

/usr/lib/python3.13/site-packages/metaextract/utils.py:48:
DeprecationWarning: Python 3.14 will, by default, filter
extracted tar archives and reject files or modify their
metadata. Use the filter argument to control this behavior.

We should probably limit the version of metaextract we use?

Does this requires any change in metaextract to continue working? As far as I can tell from release notes, the only diference with tarfile.extractall is that the filter parameter is set to data by default. This will ignore files metadata like permissions and other special files, but I think that in this case it's okay, it should continue working as expected.

Maybe it's a good idea to add the filter='data' to the extractall call in metaextract and this warning will go away, but the filter parameter was added in 3.12, so that change will require some version checking code to keep it compatible with older python.

[mcepl]

Maybe it's a good idea to add the filter='data' to the extractall call in metaextract and this warning will go away, but the filter parameter was added in 3.12, so that change will require some version checking code to keep it compatible with older python.

We have this backported to Python 3.6 in CVE-2007-4559-filter-tarfile_extractall.patch.