There's a merged pull request on the void-packages repository

runc: update to 1.0.0rc10.
https://github.com/void-linux/void-packages/pull/18526

Description:
Fix CVE-2019-19921

See https://github.com/opencontainers/runc/issues/2197