Remove unneeded aliased reference to Red Hat bug

See previous commit, otherwise use non-aliased bug reference because
sometimes CVE alias are removed.

The specific CVEs for krb5 are already discussed with the maintainers
(wich are as well upstream), so we will followup once we have more
feedback on the two particular CVEs.