I'm speculatively assigning Low severity here, please change if needed.

Correct links:
https://android.googlesource.com/platform/external/tlsdate/+/5a3de7f1137f650c5b4da38fcf3da3a00be905d2%5E
https://android.googlesource.com/platform/external/tlsdate/+/c339766a51d2db711171cb704e30b7ae916a987f%5E

I looked at the commits, are these actually security bugs? 5a3de fixes compilation on MIPS64?

I don't think the various changes I made had security consequences, though the code was rather a mess. You would need them eventually if switching your OpenSSL 1.0.2 (due to be EOL at the end of 2019) to either BoringSSL or OpenSSL 1.1.0. Those being:

https://android.googlesource.com/platform/external/tlsdate/+/c339766a51d2db711171cb704e30b7ae916a987f
https://android.googlesource.com/platform/external/tlsdate/+/5a3de7f1137f650c5b4da38fcf3da3a00be905d2

Yeah those are the two that I suggested merging. We should just do it.

(Ah, hrm. For some reason your links have a %5E on them which is taking them to parent commits instead.)

Keeping this open for the eventual OpenSSL uprev but this is not currently actionable, and also not a security bug.