Version 3.6.15 is marked as MFH: 2020Q3 but was not merged. Quaterly has vulnerable 3.6.14.
I know. Ports-secteam has to approve merges to the quarterly branches because portmgr thinks committers are too stupid to decide this for themselves. And ports-secteam is understaffed.
Approved for MFH joneum (ports-secteam)
A commit references this bug: Author: tijl Date: Tue Sep 8 18:33:34 UTC 2020 New revision: 548039 URL: https://svnweb.freebsd.org/changeset/ports/548039 Log: MFH: r547781 Update to 3.6.15. PR: 249190 Security: https://gnutls.org/security-new.html#GNUTLS-SA-2020-09-04 Approved by: ports-secteam (joneum) Changes: _U branches/2020Q3/ branches/2020Q3/security/gnutls/Makefile branches/2020Q3/security/gnutls/distinfo branches/2020Q3/security/gnutls/pkg-plist