There's a closed pull request on the void-packages repository

libextractor: update to 1.10
https://github.com/void-linux/void-packages/pull/26493

Description:
Fix for CVE-2019-15531

Oddly SONAME went down, changed to what xbps reported it to be