New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/pull/31420#issuecomment-861766350

Comment:
It would be nice to look into upstreaming our patches, but otherwise I think they are all still necessary :(

Including the CVE one :/