Why no update of base/ports openssl for recent CVEs?

[Mel Pilgrim]

On 2017-11-21 17:11, Robert Simmons wrote:
> I don't have an answer for base, but I think if you just update your ports
> tree, you will see the update to 1.0.2m was committed on Nov 2nd (2 weeks
> and 5 days ago):
> https://svnweb.freebsd.org/ports?view=revision&revision=453380

That explains ports: it was never merged to quarterly. Submitted 
ports/223797 to ask for MFH to 2017Q4.