Part of lp.archivepublisher.customupload View In Hierarchy
This can happen if someone embeds ../file in the tar, for example.