Note: I updated the original post to denote WordPress 4.9.8. The 4.9-branch patch wasn't in yet before 4.9.7 shipped for the security fix.