diff --git a/.travis.settings.xml b/.travis.settings.xml
deleted file mode 100644
index 5c65a2e..0000000
--- a/.travis.settings.xml
+++ /dev/null
@@ -1,14 +0,0 @@
-<settings>
-    <servers>
-        <server>
-            <id>nexus-snapshots</id>
-            <username>${env.MAVEN_REPO_USERNAME}</username>
-            <password>${env.MAVEN_REPO_PASSWORD}</password>
-        </server>
-        <server>
-            <id>nexus-releases</id>
-            <username>${env.MAVEN_REPO_USERNAME}</username>
-            <password>${env.MAVEN_REPO_PASSWORD}</password>
-        </server>
-    </servers>
-</settings>
\ No newline at end of file
diff --git a/.travis.yml b/.travis.yml
deleted file mode 100644
index 7b1020e..0000000
--- a/.travis.yml
+++ /dev/null
@@ -1,76 +0,0 @@
-# Build script for Travis CI
-#
-
-# use xenial distribution
-dist: xenial
-
-# no need to check for oracle's java
-language: java
-jdk: openjdk8
-
-# speed up builds by caching maven local repository
-cache:
-  directories:
-  - "$HOME/.m2/repository"
-
-# as agreed in our SOP
-branches:
-  only:
-  - master
-  - development
-  - /^release\/.*$/
-  - /^hotfix\/.*$/
-  - /^[vV]?\d+\.\d+\.\d+$/ # matches e.g., v1.2.3, 1.2.3, V1.2.3
-
-# added to make logs look cleaner, crisper, certified fresh
-before_install: unset _JAVA_OPTIONS 
-
-# speed up builds by telling Travis that we don't need any special "installation"
-install: true
-
-# as agreed in our SOP, build everything (don't deploy, just try to 'mvn install' locally, which covers all phases)
-script: mvn --quiet --activate-profiles !development-build,!release-build --settings .travis.settings.xml clean cobertura:cobertura install
-# upload code coverage report, generate maven site (javadocs, documentation, static code analysis, etc.)
-after_success: 
-- bash <(curl -s https://codecov.io/bash)
-- mvn --quiet --activate-profiles !development-build,!release-build --settings .travis.settings.xml site
-
-# upload to maven
-deploy:
-  # as agreed in our SOP, builds on development branch will deploy to our maven repository after validating
-  # the artifact has a proper SNAPSHOT version
-  # artifact will be installed in our testing instance if it is a .war file
-- skip_cleanup: true
-  provider: script
-  script: echo "development deployment" && mvn --quiet --activate-profiles development-build,!release-build --settings .travis.settings.xml deploy
-  on:
-    branch: development
-    condition: '"$TRAVIS_EVENT_TYPE" = "push"'
-  # as agreed in our SOP, tagging a commit on the master branch will upload to our maven repository
-  # after validating the artifact has a proper release version
-  # artifact will be installed in our testing instance if it is a .war file
-- skip_cleanup: true
-  provider: script
-  script: echo "master deployment" && mvn --quiet --activate-profiles !development-build,release-build --settings .travis.settings.xml deploy
-  on:
-    branch: master
-    condition: '"$TRAVIS_EVENT_TYPE" = "push"'
-
-# change according to your needs, but we recommend to deactivate email notifications
-# for now, we configured Travis to send a notification to the #travis-ci channel 
-notifications:
-  email:
-    on_success: never
-    on_failure: never
-  slack: 
-    on_success: never
-    on_failure: always
-    # edit the following section if you want to get slack notifications
-    rooms:
-      - secure: "***"
-
-# encrypted variables
-env:
-  global:
-    - secure: "LlC638W4guO/Jv8mFTl2ifQG9iFLqkCCjqKrDZkKzWd2KdZBDFygB1dSXVWgORYhzOonfpURiXAiddmKor2w6yO/t9o9MxJ3iN9l6qZCQurNyCb91WhGHKAPy502Ig407rJk8aLPIHgwNVu8PtFJmQFOH5W24YyoVDCjvG5u8hOmNaqdsc7WSkTBThGQsElR16Vm+LA9EbFVBSdhu/QN0slLiqoA2D7MgUFc3Jsxv1PYXrOWUQ5uHZ6VRAdmcYVp1Qt07nuu1QcMr0TEOvCgmyUD8B1FTAuXPYJxLbqvQ8VdgXS99bbbsAC0cxJl/aLjFYeOiJNv79MdG7DM1cbnJwx2pQMvCiFiuukz2NOsffDeR+9M5QbMo3QbjBvzJeQqPm1Ecqk8B7VN0dWpyHlkLzR0qNVOMs6dzfAVpXvLNF7fXf0pZKPE/EzuSxIDLrJtJlKXdyxs0gd8vz2YTtTalwlA6Fr5OZel6pIj3BvphYt4/14PxtNQXL3NDF4r4h0IvjzMYv2SUa2v/hyxORB7P1zgujq8Cf6xG1jz31D5uC3c/g4mOxfY6+b/6Dkbwk5liylOMNNKSknr6IkcfO5NL90BzcE08V7hExci8D1MyMvSNmHnDCxKYySnUeaadOzEXUyZoL5BvMOGi4t2wM1SXvF9K6IKnWu68ooPYNUjeFs="
-    - secure: "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"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d9f4274..0a82ceb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.9.4 (2022-01-04)
+* Fix CVE-2021-44832
+* Increase log4j-version `2.17.0` -> `2.17.1`
+
 ## 1.9.3 (2021-12-20)
 * Fix CVE-2021-45105
 * Increase log4j-version `2.16.0` -> `2.17.0`
diff --git a/pom.xml b/pom.xml
index a99612f..93ec758 100644
--- a/pom.xml
+++ b/pom.xml
@@ -9,14 +9,14 @@
 		<version>3.1.4</version>
 	</parent>
 	<artifactId>user-db-portlet</artifactId>
-	<version>1.9.3</version>
+	<version>1.9.4</version>
 	<name>User Database Portlet</name>
 	<url>http://github.com/qbicsoftware/user-db-portlet</url>
 	<packaging>war</packaging>
 	<properties>
 		<vaadin.version>7.7.28</vaadin.version>
 		<vaadin.plugin.version>7.7.28</vaadin.plugin.version>
-		<log4j.version>2.17.0</log4j.version>
+		<log4j.version>2.17.1</log4j.version>
 	</properties>
 	<!-- we only need to tell maven where to find our parent pom and other QBiC
 		dependencies -->