rhsa-2020:1267

The source describes two vulnerabilities: a memory-cache side-channel attack against Libgcrypt ECDSA signatures and a heap-based buffer overflow in Mozilla NSS.