4 ms·

You should have explained to your auditor that Debian backports security patches to the shipped version of OpenSSL.