There is a new pull request by pullmoll against master on the void-packages repository https://github.com/pullmoll/void-packages reportlab https://github.com/void-linux/void-packages/pull/21326 python-reportlab: update to 3.5.42 (CVE-2019-17626) A patch file from https://github.com/void-linux/void-packages/pull/21326.patch is attached