10:01 mfechner 

Security related update to 0.14.0.
Changelog:
https://github.com/apache/thrift/blob/master/CHANGES.md

In the changelog I cannot find the information that this includes a security
related fix.
Neither in CVE database:
https://www.cvedetails.com/product/38295/Apache-Thrift.html?vendor_id=45

But gitlab mentions it that it updates to version 0.14.0 to mitigate security
concerns:
https://about.gitlab.com/releases/2021/03/04/security-release-gitlab-13-9-2-released/
This update is therefor required for the gitlab-ce security update to 13.9.2.

Changed build system to cmake, this fixed problems if openssl from ports is
used.
It also improves the build performance by factor of CPUs available.
Cmake also seems to be the recommended build system.

 

14:17 mat 

Update to 0.9.3

PR:		203767
Submitted by:	devnexen gmail com
Approved by:	maintainer
Sponsored by:	Absolight

 

15:11 wg 

devel/thrift-cpp: C++ interface to Thrift

WWW: http://thrift.apache.org/

PR:		ports/183060
Submitted by:	Valery Komarov <komarov valerka.net>