Release v4.9.4

Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6832a95..d949d3e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,21 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.9.4] - 2026-08-25
+
+## Security
+
+  - Fix information leak on fragmented packets with different header lengths
+
+### Fixed
+
+  - Fix reporting oob output #95
+  - Fix buffer trimming to ip6-announced length #96
+
+## Changed
+
+  - slirp: permit guestfwd to vhost_addr/vnameserver_addr #81 #140
+
 ## [4.9.3] - 2026-05-26
 
 ### Fixed
@@ -289,7 +304,8 @@
  - Standalone project, removing any QEMU dependency.
  - License clarifications.
 
-[Unreleased]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.3...master
+[Unreleased]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.4...master
+[4.9.4]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.3...v4.9.4
 [4.9.3]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.2...v4.9.3
 [4.9.2]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.1...v4.9.2
 [4.9.1]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.0...v4.9.1
diff --git a/meson.build b/meson.build
index 75a60da..b3da9d7 100644
--- a/meson.build
+++ b/meson.build
@@ -1,5 +1,5 @@
 project('libslirp', 'c',
-  version : '4.9.3',
+  version : '4.9.4',
   license : 'BSD-3-Clause',
   default_options : ['warning_level=1', 'c_std=gnu99'],
   meson_version : '>= 0.60',