There is a new pull request by travankor against master on the void-packages repository https://github.com/travankor/void-packages libexif https://github.com/void-linux/void-packages/pull/16345 libexif: fix CVE-2018-20030. None A patch file from https://github.com/void-linux/void-packages/pull/16345.patch is attached