diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml
index 4c79ce4..7c42808 100644
--- a/.github/workflows/debian.yml
+++ b/.github/workflows/debian.yml
@@ -22,7 +22,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ghc: ['8.10.7', '9.0.2', '9.2.5', '9.4.3']
+        ghc: ['8.10.7', '9.0.2', '9.2.5', '9.4.4']
         deb: ['buster', 'slim-buster']
         include:
           - ghc: '8.10.7'
@@ -31,7 +31,7 @@ jobs:
             ghc_minor: '9.0'
           - ghc: '9.2.5'
             ghc_minor: '9.2'
-          - ghc: '9.4.3'
+          - ghc: '9.4.4'
             ghc_minor: '9.4'
     steps:
       - uses: actions/checkout@v2
@@ -59,7 +59,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ghc: ['8.10.7', '9.0.2', '9.2.5', '9.4.3']
+        ghc: ['8.10.7', '9.0.2', '9.2.5', '9.4.4']
         # uraimo/run-on-arch-action does not support debian slim variants
         deb: ['buster']
         arch: ['aarch64']
@@ -70,7 +70,7 @@ jobs:
             ghc_minor: '9.0'
           - ghc: '9.2.5'
             ghc_minor: '9.2'
-          - ghc: '9.4.3'
+          - ghc: '9.4.4'
             ghc_minor: '9.4'
           - arch: aarch64
             docker_platform: arm64
diff --git a/9.4/buster/Dockerfile b/9.4/buster/Dockerfile
index 1f7e130..9a3d71c 100644
--- a/9.4/buster/Dockerfile
+++ b/9.4/buster/Dockerfile
@@ -80,7 +80,7 @@ RUN set -eux; \
     \
     cabal --version
 
-ARG GHC=9.4.3
+ARG GHC=9.4.4
 ARG GHC_RELEASE_KEY=FFEB7CE81E16A36B3E2DED6F2DE04D4E97DB64AD
 
 RUN set -eux; \
@@ -90,10 +90,10 @@ RUN set -eux; \
     # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
     case "$ARCH" in \
         'aarch64') \
-            GHC_SHA256='9694131b02f938e72e1740b772ff1c1c81a36ef44233dc230bbd978e7dd08e71'; \
+            GHC_SHA256='2c0f22a7430490be3071f88240761bd7aadb7d40f22c6b9f1d2485ffcdf4e2e0'; \
             ;; \
         'x86_64') \
-            GHC_SHA256='940ac2b1770dc63b5f3f38f829bfe69f4a572d6b26cd93094cdd99d5300b5067'; \
+            GHC_SHA256='a3ecd2426bb519d6fdad05904c386f1c74b433f07722b0d1ef606c23159ade2d'; \
             ;; \
         *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;; \
     esac; \
diff --git a/9.4/slim-buster/Dockerfile b/9.4/slim-buster/Dockerfile
index cc97814..4295f62 100644
--- a/9.4/slim-buster/Dockerfile
+++ b/9.4/slim-buster/Dockerfile
@@ -94,7 +94,7 @@ RUN set -eux; \
     \
     cabal --version
 
-ARG GHC=9.4.3
+ARG GHC=9.4.4
 ARG GHC_RELEASE_KEY=FFEB7CE81E16A36B3E2DED6F2DE04D4E97DB64AD
 
 RUN set -eux; \
@@ -104,10 +104,10 @@ RUN set -eux; \
     # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
     case "$ARCH" in \
         'aarch64') \
-            GHC_SHA256='9694131b02f938e72e1740b772ff1c1c81a36ef44233dc230bbd978e7dd08e71'; \
+            GHC_SHA256='2c0f22a7430490be3071f88240761bd7aadb7d40f22c6b9f1d2485ffcdf4e2e0'; \
             ;; \
         'x86_64') \
-            GHC_SHA256='940ac2b1770dc63b5f3f38f829bfe69f4a572d6b26cd93094cdd99d5300b5067'; \
+            GHC_SHA256='a3ecd2426bb519d6fdad05904c386f1c74b433f07722b0d1ef606c23159ade2d'; \
             ;; \
         *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;; \
     esac; \