diff --git a/CHANGELOG.md b/CHANGELOG.md
index c1edef96e8..699d0a4d1e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -34,6 +34,11 @@ RELEASING:
  -->
 
 ## [Unreleased]
+## [6.6.4] - 2022-01-03
+### Fixed
+- update log4j to version 2.17.1
+- switch to GH fork version v0.13.15-4 
+
 ## [6.6.3] - 2021-12-15
 ### Fixed
 - switch to GH fork version v0.13.15-3 to address updated log4j version
@@ -492,7 +497,8 @@ are attached to roads. ([Issue #162](https://github.com/GIScience/openrouteservi
 - Fix bug in RPHAST when location lies on a oneway road.
 - Consider turn restrictions if optimized=false is passed.
 
-[unreleased]: https://github.com/GIScience/openrouteservice/compare/v6.6.3...HEAD
+[unreleased]: https://github.com/GIScience/openrouteservice/compare/v6.6.4...HEAD
+[6.6.4]: https://github.com/GIScience/openrouteservice/compare/v6.6.3...v6.6.4
 [6.6.3]: https://github.com/GIScience/openrouteservice/compare/v6.6.2...v6.6.3
 [6.6.2]: https://github.com/GIScience/openrouteservice/compare/v6.6.1...v6.6.2
 [6.6.1]: https://github.com/GIScience/openrouteservice/compare/v6.6.0...v6.6.1
diff --git a/openrouteservice-api-tests/pom.xml b/openrouteservice-api-tests/pom.xml
index 6591fdb530..8715324d9d 100644
--- a/openrouteservice-api-tests/pom.xml
+++ b/openrouteservice-api-tests/pom.xml
@@ -14,7 +14,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <maven.compiler.target>1.8</maven.compiler.target>
         <slf4j.version>1.7.32</slf4j.version>
-        <log4j.version>2.16.0</log4j.version>
+        <log4j.version>2.17.1</log4j.version>
     </properties>
 
     <build>
diff --git a/openrouteservice/pom.xml b/openrouteservice/pom.xml
index 2d691d21a8..6c607e9a97 100644
--- a/openrouteservice/pom.xml
+++ b/openrouteservice/pom.xml
@@ -51,7 +51,7 @@
         <maven.compiler.target>1.8</maven.compiler.target>
         <geotools.version>19.1</geotools.version>
         <slf4j.version>1.7.32</slf4j.version>
-        <log4j.version>2.16.0</log4j.version>
+        <log4j.version>2.17.1</log4j.version>
         <sonar.projectKey>GIScience_openrouteservice</sonar.projectKey>
         <sonar.organization>giscience</sonar.organization>
         <sonar.host.url>https://sonarcloud.io</sonar.host.url>
@@ -400,19 +400,19 @@
         <dependency>
             <groupId>com.github.GIScience.graphhopper</groupId>
             <artifactId>graphhopper-core</artifactId>
-            <version>v0.13.15-3</version>
+            <version>v0.13.15-4</version>
         </dependency>
 
         <dependency>
             <groupId>com.github.GIScience.graphhopper</groupId>
             <artifactId>graphhopper-reader-osm</artifactId>
-            <version>v0.13.15-3</version>
+            <version>v0.13.15-4</version>
         </dependency>
 
         <dependency>
             <groupId>com.github.GIScience.graphhopper</groupId>
             <artifactId>graphhopper-api</artifactId>
-            <version>v0.13.15-3</version>
+            <version>v0.13.15-4</version>
         </dependency>
 
         <!-- remove the comment to enable debugging