15:41 Matthias Fechner (mfechner) 

devel/thrift: update to 0.16.0

Changelog:
https://github.com/apache/thrift/blob/master/CHANGES.md#0160
This update to required for gitlab-ce 15.4.

PR:		267228
Approved by:	 komarov@valerka.net (maintainer timeout)
Differential Revision:	https://reviews.freebsd.org/D37068

    519e762

10:01 mfechner 

Security related update to 0.14.0.
Changelog:
https://github.com/apache/thrift/blob/master/CHANGES.md

In the changelog I cannot find the information that this includes a security
related fix.
Neither in CVE database:
https://www.cvedetails.com/product/38295/Apache-Thrift.html?vendor_id=45

But gitlab mentions it that it updates to version 0.14.0 to mitigate security
concerns:
https://about.gitlab.com/releases/2021/03/04/security-release-gitlab-13-9-2-released/
This update is therefor required for the gitlab-ce security update to 13.9.2.

Changed build system to cmake, this fixed problems if openssl from ports is
used.
It also improves the build performance by factor of CPUs available.
Cmake also seems to be the recommended build system.