python
diff --git a/‎whatsnew/changelog.po‎
Lines changed: 10 additions & 1 deletion b/‎whatsnew/changelog.po‎
Lines changed: 10 additions & 1 deletion
@@ -11,7 +11,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Python 3.10\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-07-05 19:06+0000\n"
+"POT-Creation-Date: 2026-07-07 20:27+0000\n"
 "PO-Revision-Date: 2025-09-22 15:59+0000\n"
 "Last-Translator: python-doc bot, 2026\n"
 "Language-Team: Polish (https://app.transifex.com/python-doc/teams/5390/pl/)\n"
@@ -73,6 +73,15 @@ msgid ""
 "Aurascape AI for the report."
 msgstr ""
 
+msgid ""
+":gh:`149486`: :func:`tarfile.data_filter` now validates link targets using "
+"the same normalised value that is written to disk, strips trailing "
+"separators from the member name when resolving a symlink's directory, and "
+"rejects link members that would replace the destination directory itself. "
+"This closes several path-traversal bypasses of the ``data`` extraction "
+"filter."
+msgstr ""
+
 msgid ""
 ":gh:`148395`: Fix a dangling input pointer in :class:`lzma."
 "LZMADecompressor`, :class:`bz2.BZ2Decompressor` when memory allocation fails "