Document Xen Security Advisory (XSA 206)

CVE lists none (yet) assigned

While here, fix a typo on my last Xen entry

Security: https://vuxml.FreeBSD.org/freebsd/47873d72-14eb-11e7-970f-002590263bf5.html