updateinfo: try to get CVEs only for RHSAs