Version 18.06.1+dfsg1-1 of docker.io is marked for autoremoval from testing on Mon 15 Oct 2018. It depends (transitively) on golang-github-hashicorp-raft, affected by #907764. You should try to prevent the removal by fixing these RC bugs.
CVE-2018-10892: The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.
CVE-2018-10892: The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.
The current maintainer is looking for someone who can help with
the maintenance of this package. If you are interested in this
package, please consider helping out. One way you can help is
offer to be a co-maintainer or triage bugs in the BTS. Please see bug number #908868 for more information.
old binaries left on all: docker-doc, golang-docker-dev, golang-github-docker-docker-dev, vim-syntax-docker (from 18.06.1+dfsg1-1) (but ignoring cruft, so nevermind)
![[bug history graph]](https://qa.debian.org/data/bts/graphs/d/docker.io.png){kind=link}