There is a new pull request by ericonr against master on the void-packages repository

https://github.com/ericonr/void-packages tombs
https://github.com/void-linux/void-packages/pull/26516

musl: backport wcsnrtombs fix.
Fix CVE-2020-28928.

A patch file from https://github.com/void-linux/void-packages/pull/26516.patch is attached