Endless OS 3.9.5 was released for existing users on Friday July 2nd, 2021.
Downloadable images for existing users should be available in the next few hours.
Security fixes: polkit
This release addresses CVE-2021-3560, a vulnerability in the polkit package which allows for an unauthorized local user account to escalate privileges and access a root shell.
More info on this vulnerability can be found here.