<div dir="ltr">phpmyadmin is basically unmaintained in ubuntu. It has a large number of very nasty security vulnerabilities that are actively exploited. In the case of lucid, there's a spam network that exploits a system fully with the version of phpmyadmin that's shipped.<div>
<br></div><div>We had a number of instances with phpmyadmin enabled, some of which were owned. We've suspended the following instances:</div><div><br></div><div>
<p class="">i-0000033a.pmtpa.wmflabs (wikiversity-sandbox-frontend)</p>
<p class="">i-0000046a.pmtpa.wmflabs (metavidwiki)</p>
<p class="">i-000003a2.pmtpa.wmflabs (phabricator)</p>
<p class="">i-00000458.pmtpa.wmflabs (centralauth-frontend)</p>
<p class="">i-0000048a.pmtpa.wmflabs (glam-gwtoolset-apt)</p><p class="">
</p><p class="">i-000001d7.pmtpa.wmflabs (resourceloader2-apache)</p>
<p class="">i-0000039e.pmtpa.wmflabs (blamemaps-m1xsmall)</p><p class="" style>In addition to disabling these instances, we've also disabled the phpmyadmin package. It'll now install a file into /var/www/phpmyadmin/index.html saying not to use phpmyadmin.</p>
<p class="" style>- Ryan</p><p></p></div></div>