Release candidate 3 is now released, it contains the core update for the security release mentioned here: https://www.drupal.org/SA-CORE-2017-002