There is a new pull request by ndowens against master on the void-packages repository

https://github.com/ndowens/void-packages matio
https://github.com/void-linux/void-packages/pull/17851

matio: CVE-2019-20020 patch
Signed-off-by: Nathan Owens <ndowens04@gmail.com>

A patch file from https://github.com/void-linux/void-packages/pull/17851.patch is attached