Updated tor package fixes security vulnerabilities:
Tor before 0.3.5.10 allows remote attackers to cause a Denial of Service (CPU consumption) (CVE-2020-10592).
Tor before 0.3.5.10 allows remote attackers to cause a Denial of Service (memory leak). This occurs in circpadsetupmachineoncirc because a circuit-padding machine can be negotiated twice on the same circuit (CVE-2020-10593).