There's a merged pull request on the void-packages repository nginx: update to 1.17.7. https://github.com/void-linux/void-packages/pull/18159 Description: Version 1.17.7 includes fix for CVE-2019-20372