By checking the state of installed package using the pkg audit -F tool on freeBSD 11 , I have found 4 vulnerability on the installed packages (installed through pkg) : samba ,OpenEXR , kdelibs and ImageMagick .I have upgraded  ImageMagick and samba to the latest version ( +  following the mitigation guide for samba : adding nt pipe support = no to nsmb.conf) .#pkg search sambap5-Samba-LDAP-0.05_2           Manage a Samba PDC with an LDAP Backendp5-Samba-SIDhelper-0.0.0_3     Create SIDs based on G/UIDssamba-nsupdate-9.8.6_1         nsupdate utility with GSS-TSIG supportsamba42-4.2.14_1               Free SMB/CIFS and AD/DC server and client for Unixsamba43-4.3.13_2               Free SMB/CIFS and AD/DC server and client for Unixsamba44-4.4.13                 Free SMB/CIFS and AD/DC server and client for Unixsamba45-4.5.8                  Free SMB/CIFS and AD/DC server and client for Unixsamba46-4.6.2                  Free SMB/CIFS and AD/DC server and client for UnixThere is no upgrade available for OpenEXR and kdelibs , the latest version is already installed. I am using the KDE4 on FreeBSD 11 , the kdelibs vulnerability affect Linux and Unix systems with the KDE4/KDE5 desktop environment.  How to mitigate the  multiple vulnerability : remote code execution and local privilege escalation on FreeBSD 11?# pkg audit -Fvulnxml file up-to-dateImageMagick7-7.0.3.7_1 is vulnerable:ImageMagick -- multiple vulnerabilitiesCVE: CVE-2017-9144CVE: CVE-2017-9143CVE: CVE-2017-9142CVE: CVE-2017-9141CVE: CVE-2017-8830CVE: CVE-2017-8765CVE: CVE-2017-8357CVE: CVE-2017-8356CVE: CVE-2017-8355CVE: CVE-2017-8354CVE: CVE-2017-8353CVE: CVE-2017-8352CVE: CVE-2017-8351CVE: CVE-2017-8350CVE: CVE-2017-8349CVE: CVE-2017-8348CVE: CVE-2017-8347CVE: CVE-2017-8346CVE: CVE-2017-8345CVE: CVE-2017-8344CVE: CVE-2017-8343CVE: CVE-2017-7943CVE: CVE-2017-7942CVE: CVE-2017-7941CVE: CVE-2017-7619CVE: CVE-2017-7606CVE: CVE-2017-7275CVE: CVE-2017-6502CVE: CVE-2017-6501CVE: CVE-2017-6500CVE: CVE-2017-6499CVE: CVE-2017-6498CVE: CVE-2017-6497CVE: CVE-2017-5511CVE: CVE-2017-5510CVE: CVE-2017-5509CVE: CVE-2017-5508CVE: CVE-2017-5507CVE: CVE-2017-5506WWW: https://vuxml.FreeBSD.org/freebsd/50776801-4183-11e7-b291-b499baebfeaf.htmlkdelibs-4.14.30_1 is vulnerable:kauth: Local privilege escalationCVE: CVE-2017-8422WWW: https://vuxml.FreeBSD.org/freebsd/0baee383-356c-11e7-b9a9-50e549ebab6c.htmlOpenEXR-2.2.0_7 is vulnerable:OpenEXR -- multiple remote code execution and denial of service vulnerabilitiesCVE: CVE-2017-9116CVE: CVE-2017-9115CVE: CVE-2017-9114CVE: CVE-2017-9113CVE: CVE-2017-9112CVE: CVE-2017-9111CVE: CVE-2017-9110WWW: https://vuxml.FreeBSD.org/freebsd/803879e9-4195-11e7-9b08-080027ef73ec.htmlsamba46-4.6.2 is vulnerable:samba -- remote code execution vulnerabilityCVE: CVE-2017-7494WWW: https://vuxml.FreeBSD.org/freebsd/6f4d96c0-4062-11e7-b291-b499baebfeaf.html4 problem(s) in the installed packages found.
How to mitigate the multiple vulnerability : remote code execution and local privilege escalation on FreeBSD 11?
security;freebsd;kde;vulnerability;pkg
KDE bug - No mitigation. Update to kauth >= 5.34 and kdelibs >= 4.14.32 (when released) is the solution provided by KDE folks. Just wait for the updated port to have this problem fixed.OpenEXR bugs - No mitigation, and the devs are not showing any sign that they will fix this soon. Best guess here is to remove this package, if you don't really use it (neither is a dependency).