EZSA-2018-009 Do not interpret PHP/PHAR uploads

More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-009-do-not-interpret-php-phar-uploads...