Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
This bug report looks like a false positive. Mesa does not link to OpenSSL, as shown by these 2 commands returning empty results:
$ rpm -ql mesa mesa-* | xargs -I{} sh -c 'ldd "{}" 2>/dev/null' | grep -i 'ssl\|crypto'
$ rpm -qR mesa mesa-* 2>/dev/null | grep -i 'ssl\|crypto'
Therefore, this report is closed as not a bug.