diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml
index 6631193..e45de9b 100644
--- a/.github/workflows/debian.yml
+++ b/.github/workflows/debian.yml
@@ -22,7 +22,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ghc: ['8.10.7', '9.0.2', '9.2.4', '9.4.2']
+        ghc: ['8.10.7', '9.0.2', '9.2.4', '9.4.3']
         deb: ['buster', 'slim-buster']
         include:
           - ghc: '8.10.7'
@@ -31,7 +31,7 @@ jobs:
             ghc_minor: '9.0'
           - ghc: '9.2.4'
             ghc_minor: '9.2'
-          - ghc: '9.4.2'
+          - ghc: '9.4.3'
             ghc_minor: '9.4'
     steps:
       - uses: actions/checkout@v2
@@ -59,7 +59,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ghc: ['8.10.7', '9.0.2', '9.2.4', '9.4.2']
+        ghc: ['8.10.7', '9.0.2', '9.2.4', '9.4.3']
         # uraimo/run-on-arch-action does not support debian slim variants
         deb: ['buster']
         arch: ['aarch64']
@@ -70,7 +70,7 @@ jobs:
             ghc_minor: '9.0'
           - ghc: '9.2.4'
             ghc_minor: '9.2'
-          - ghc: '9.4.2'
+          - ghc: '9.4.3'
             ghc_minor: '9.4'
           - arch: aarch64
             docker_platform: arm64
diff --git a/9.4/buster/Dockerfile b/9.4/buster/Dockerfile
index c9da3bc..8a03984 100644
--- a/9.4/buster/Dockerfile
+++ b/9.4/buster/Dockerfile
@@ -86,7 +86,7 @@ RUN set -eux; \
     \
     cabal --version
 
-ARG GHC=9.4.2
+ARG GHC=9.4.3
 ARG GHC_RELEASE_KEY=FFEB7CE81E16A36B3E2DED6F2DE04D4E97DB64AD
 
 RUN set -eux; \
@@ -96,10 +96,10 @@ RUN set -eux; \
     # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
     case "$ARCH" in \
         'aarch64') \
-            GHC_SHA256='ea075c54143dde37ea50cd085af61abb1fcfce8913deac298adc328bbb349464'; \
+            GHC_SHA256='9694131b02f938e72e1740b772ff1c1c81a36ef44233dc230bbd978e7dd08e71'; \
             ;; \
         'x86_64') \
-            GHC_SHA256='5bf34ef70a2b824d45e525f09690c76707b7f01698962e425e8fd78b94ea9174'; \
+            GHC_SHA256='940ac2b1770dc63b5f3f38f829bfe69f4a572d6b26cd93094cdd99d5300b5067'; \
             ;; \
         *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;; \
     esac; \
diff --git a/9.4/slim-buster/Dockerfile b/9.4/slim-buster/Dockerfile
index be06789..df2c338 100644
--- a/9.4/slim-buster/Dockerfile
+++ b/9.4/slim-buster/Dockerfile
@@ -100,7 +100,7 @@ RUN set -eux; \
     \
     cabal --version
 
-ARG GHC=9.4.2
+ARG GHC=9.4.3
 ARG GHC_RELEASE_KEY=FFEB7CE81E16A36B3E2DED6F2DE04D4E97DB64AD
 
 RUN set -eux; \
@@ -110,10 +110,10 @@ RUN set -eux; \
     # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
     case "$ARCH" in \
         'aarch64') \
-            GHC_SHA256='ea075c54143dde37ea50cd085af61abb1fcfce8913deac298adc328bbb349464'; \
+            GHC_SHA256='9694131b02f938e72e1740b772ff1c1c81a36ef44233dc230bbd978e7dd08e71'; \
             ;; \
         'x86_64') \
-            GHC_SHA256='5bf34ef70a2b824d45e525f09690c76707b7f01698962e425e8fd78b94ea9174'; \
+            GHC_SHA256='940ac2b1770dc63b5f3f38f829bfe69f4a572d6b26cd93094cdd99d5300b5067'; \
             ;; \
         *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;; \
     esac; \