The upcoming tor releases fixing CVE-2017-0380 will make it even more uncomfortable for RPM users if there will be no updated packages for them and it does not look like there is anyone working on it.
Can you provide a reference to CVE-2017-0380, please?