There is a new pull request by tibequadorian against master on the void-packages repository

https://github.com/tibequadorian/void-packages ytnef
https://github.com/void-linux/void-packages/pull/35517

ytnef: update to 2.0.
- fix [CVE-2021-3403](https://nvd.nist.gov/vuln/detail/CVE-2021-3403)
- fix [CVE-2021-3404](https://nvd.nist.gov/vuln/detail/CVE-2021-3404)

<!-- Uncomment relevant sections and delete options which are not applicable -->

#### Testing the changes
- I tested the changes in this PR: **YES**

<!--
#### New package
- This new package conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements): **YES**|**NO**
-->

<!-- Note: If the build is likely to take more than 2 hours, please [skip CI](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration)
and test at least one native build and, if supported, at least one cross build.
Ignore this section if this PR is not skipping CI.
-->
<!-- 
#### Local build testing
- I built this PR locally for my native architecture, (ARCH-LIBC)
- I built this PR locally for these architectures (if supported. mark crossbuilds):
  - aarch64-musl
  - armv7l
  - armv6l-musl
-->


A patch file from https://github.com/void-linux/void-packages/pull/35517.patch is attached