main/xen: add missing secfixes info

main/xen/APKBUILD

@@ -12,7 +12,7 @@ depends="bash iproute2 logrotate"
 depends_dev="openssl-dev python2-dev e2fsprogs-dev gettext zlib-dev ncurses-dev
 	dev86 texinfo perl pciutils-dev glib-dev yajl-dev libnl3-dev
 	spice-dev gnutls-dev curl-dev libaio-dev lzo-dev xz-dev util-linux-dev
-	e2fsprogs-dev linux-headers argp-standalone perl-dev flex bison"
+	linux-headers argp-standalone perl-dev flex bison"
 makedepends="$depends_dev autoconf automake libtool dnsmasq"
 options="!strip"
 
@@ -145,7 +145,7 @@ options="!strip"
 #     - CVE-2018-12130  XSA-297
 #     - CVE-2019-11091  XSA-297
 #   4.12.1-r0:
-#     - CVE-????-?????  XSA-295
+#     - CVE-2019-17349 CVE-2019-17350 XSA-295
 #   4.12.1-r1:
 #     - CVE-2019-18425 XSA-298
 #     - CVE-2019-18421 XSA-299