There is an updated pull request by ndowens against master on the void-packages repository

https://github.com/ndowens/void-packages blueman
https://github.com/void-linux/void-packages/pull/26307

blueman: update to 2.1.4
Fixes CVE-2020-15238

A patch file from https://github.com/void-linux/void-packages/pull/26307.patch is attached