A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
https://access.redhat.com/errata/RHSA-2019:2237
http://www.securityfocus.com/bid/107260
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html