Only use tarfile.data_filter when it's available (#3566)

Signed-off-by: Bernát Gábor <[email protected]>

Author: gaborbernat

docs/changelog/3565.bugfix.rst

@@ -0,0 +1,8 @@
+Use `tarfile.data_filter <https://docs.python.org/3/library/tarfile.html#tarfile.data_filter>`_ with ``extractall``
+only on supported Python versions:
+
+- ``>= 3.11.4``
+- ``>= 3.10.12`` and ``< 3.11``
+- ``>= 3.9.17`` and ``< 3.10``
+
+by :user:`gaborbernat`.

src/tox/tox_env/python/virtual_env/package/cmd_builder.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import glob
+import sys
 import tarfile
 from abc import ABC
 from functools import partial
@@ -107,7 +108,14 @@ def extract_install_info(self, for_env: EnvConfigSet, path: Path) -> list[Packag
             if not work_dir.exists():  # pragma: no branch
                 work_dir.mkdir()
             with tarfile.open(str(path), "r:gz") as tar:
-                tar.extractall(path=str(work_dir), filter=tarfile.data_filter)  # noqa: S202
+                tar.extractall(  # noqa: S202
+                    path=str(work_dir),
+                    filter=tarfile.data_filter
+                    if sys.version_info >= (3, 11, 4)
+                    or (3, 10, 12) <= sys.version_info < (3, 11)
+                    or (3, 9, 17) <= sys.version_info < (3, 10)
+                    else None,
+                )
             # the register run env is guaranteed to be called before this
             assert self._sdist_meta_tox_env is not None  # noqa: S101
             with self._sdist_meta_tox_env.display_context(self._has_display_suspended):