diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml
index c6185b4..47b68f3 100644
--- a/.github/workflows/debian.yml
+++ b/.github/workflows/debian.yml
@@ -22,7 +22,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ghc: ['9.0.2', '9.2.8', '9.4.8', '9.6.4', '9.8.2']
+        ghc: ['9.0.2', '9.2.8', '9.4.8', '9.6.5', '9.8.2']
         deb: ['buster', 'slim-buster']
         include:
           - ghc: '9.0.2'
@@ -31,7 +31,7 @@ jobs:
             ghc_minor: '9.2'
           - ghc: '9.4.8'
             ghc_minor: '9.4'
-          - ghc: '9.6.4'
+          - ghc: '9.6.5'
             ghc_minor: '9.6'
           - ghc: '9.8.2'
             ghc_minor: '9.8'
@@ -61,7 +61,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ghc: ['9.0.2', '9.2.8', '9.4.8', '9.6.4', '9.8.2']
+        ghc: ['9.0.2', '9.2.8', '9.4.8', '9.6.5', '9.8.2']
         # uraimo/run-on-arch-action does not support debian slim variants
         deb: ['buster']
         arch: ['aarch64']
@@ -72,7 +72,7 @@ jobs:
             ghc_minor: '9.2'
           - ghc: '9.4.8'
             ghc_minor: '9.4'
-          - ghc: '9.6.4'
+          - ghc: '9.6.5'
             ghc_minor: '9.6'
           - ghc: '9.8.2'
             ghc_minor: '9.8'
diff --git a/9.6/buster/Dockerfile b/9.6/buster/Dockerfile
index 1832248..916589b 100644
--- a/9.6/buster/Dockerfile
+++ b/9.6/buster/Dockerfile
@@ -80,7 +80,7 @@ RUN set -eux; \
     \
     cabal --version
 
-ARG GHC=9.6.4
+ARG GHC=9.6.5
 ARG GHC_RELEASE_KEY=88B57FCF7DB53B4DB3BFA4B1588764FBE22D19C4
 
 RUN set -eux; \
@@ -90,10 +90,10 @@ RUN set -eux; \
     # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
     case "$ARCH" in \
         'aarch64') \
-            GHC_SHA256='d430345a66128c858e09dd9a90e5beabc045a9a3cedf776aea3adb45d1286276'; \
+            GHC_SHA256='fc4e2df394b9d6f48bdb0abaabad1c97825264cbe4e75e7463fc794cb3f87047'; \
             ;; \
         'x86_64') \
-            GHC_SHA256='59885c43902110262cda168513dc6a9cc750e3e728dffb0cdb168e44929cb014'; \
+            GHC_SHA256='3851029d4af6353e75f5a6d4055e0a3ab95ad986d71a603901000af048ff106e'; \
             ;; \
         *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;; \
     esac; \
diff --git a/9.6/slim-buster/Dockerfile b/9.6/slim-buster/Dockerfile
index aaae746..b1ad7e4 100644
--- a/9.6/slim-buster/Dockerfile
+++ b/9.6/slim-buster/Dockerfile
@@ -94,7 +94,7 @@ RUN set -eux; \
     \
     cabal --version
 
-ARG GHC=9.6.4
+ARG GHC=9.6.5
 ARG GHC_RELEASE_KEY=88B57FCF7DB53B4DB3BFA4B1588764FBE22D19C4
 
 RUN set -eux; \
@@ -104,10 +104,10 @@ RUN set -eux; \
     # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
     case "$ARCH" in \
         'aarch64') \
-            GHC_SHA256='d430345a66128c858e09dd9a90e5beabc045a9a3cedf776aea3adb45d1286276'; \
+            GHC_SHA256='fc4e2df394b9d6f48bdb0abaabad1c97825264cbe4e75e7463fc794cb3f87047'; \
             ;; \
         'x86_64') \
-            GHC_SHA256='59885c43902110262cda168513dc6a9cc750e3e728dffb0cdb168e44929cb014'; \
+            GHC_SHA256='3851029d4af6353e75f5a6d4055e0a3ab95ad986d71a603901000af048ff106e'; \
             ;; \
         *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;; \
     esac; \