Aug 17, 11:13 PDT
Resolved – Drupal.org has released version 8.3.7. This release is classified as a security release. Pantheon has made the update available for one-click update in site dashboards. Instructions for applying core updates can be found in our Support Center. This release addresses the SA-2017-004; all users are urged to upgrade their sites as soon as possible.
 – https://www.drupal.org/project/drupal/releases/8.3.7
 – http://helpdesk.getpantheon.com/customer/portal/articles/361248
 – https://www.drupal.org/SA-CORE-2017-004