Apache BuildStream

Apache BuildStream 2.8.1 Blocks Tar Extraction Escape

BuildStream's tar source plugin can follow malicious archive symlinks outside extraction paths when affected releases run on Python before 3.12. Update build runners with the 2.8.1 fix and verify their actual interpreter and source trust.