diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml
index b1fc313..4b80885 100644
--- a/.github/workflows/debian.yml
+++ b/.github/workflows/debian.yml
@@ -26,7 +26,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ghc: ['9.12.2', '9.10.1', '9.8.4', '9.6.7']
+        ghc: ['9.12.2', '9.10.2', '9.8.4', '9.6.7']
         deb: ['bullseye', 'slim-bullseye']
         include:
           - ghc: '9.12.2'
@@ -35,7 +35,7 @@ jobs:
           - ghc: '9.12.2'
             ghc_minor: '9.12'
             deb: 'slim-bookworm'
-          - ghc: '9.10.1'
+          - ghc: '9.10.2'
             ghc_minor: '9.10'
           - ghc: '9.8.4'
             ghc_minor: '9.8'
@@ -72,7 +72,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ghc: ['9.6.7', '9.8.4', '9.10.1', '9.12.2']
+        ghc: ['9.6.7', '9.8.4', '9.10.2', '9.12.2']
         # uraimo/run-on-arch-action does not support debian slim variants
         deb: ['bullseye']
         arch: ['aarch64']
@@ -84,7 +84,7 @@ jobs:
             arch: 'aarch64'
             docker_platform: arm64
           # bullseye (debian 11)
-          - ghc: '9.10.1'
+          - ghc: '9.10.2'
             ghc_minor: '9.10'
             docker_platform: arm64
           - ghc: '9.8.4'
diff --git a/9.10/bullseye/Dockerfile b/9.10/bullseye/Dockerfile
index b976a40..91e6bfc 100644
--- a/9.10/bullseye/Dockerfile
+++ b/9.10/bullseye/Dockerfile
@@ -94,8 +94,8 @@ RUN set -eux; \
     \
     cabal --version
 
-ARG GHC=9.10.1
-ARG GHC_RELEASE_KEY=FFEB7CE81E16A36B3E2DED6F2DE04D4E97DB64AD
+ARG GHC=9.10.2
+ARG GHC_RELEASE_KEY=88B57FCF7DB53B4DB3BFA4B1588764FBE22D19C4
 
 RUN set -eux; \
     cd /tmp; \
@@ -104,10 +104,10 @@ RUN set -eux; \
     # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
     case "$ARCH" in \
         'aarch64') \
-            GHC_SHA256='1db449c445d34779d4deaba22341576f7b512a05b6c2b5cb64f3846d1509714e'; \
+            GHC_SHA256='0188ca098abdaf71eb0804d0f35311f405da489137d8d438bfaa43b8d1e3f1b0'; \
             ;; \
         'x86_64') \
-            GHC_SHA256='78975575b8125ecf1f50f78b1016b14ea6e87abbf1fc39797af469d029c5d737'; \
+            GHC_SHA256='2fe2c3e0a07e4782530e8bf83eeda8ff6935e40d5450c1809abcdc6182c9c848'; \
             ;; \
         *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;; \
     esac; \
diff --git a/9.10/slim-bullseye/Dockerfile b/9.10/slim-bullseye/Dockerfile
index 1145019..e4ad370 100644
--- a/9.10/slim-bullseye/Dockerfile
+++ b/9.10/slim-bullseye/Dockerfile
@@ -94,8 +94,8 @@ RUN set -eux; \
     \
     cabal --version
 
-ARG GHC=9.10.1
-ARG GHC_RELEASE_KEY=FFEB7CE81E16A36B3E2DED6F2DE04D4E97DB64AD
+ARG GHC=9.10.2
+ARG GHC_RELEASE_KEY=88B57FCF7DB53B4DB3BFA4B1588764FBE22D19C4
 
 RUN set -eux; \
     cd /tmp; \
@@ -104,10 +104,10 @@ RUN set -eux; \
     # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
     case "$ARCH" in \
         'aarch64') \
-            GHC_SHA256='1db449c445d34779d4deaba22341576f7b512a05b6c2b5cb64f3846d1509714e'; \
+            GHC_SHA256='0188ca098abdaf71eb0804d0f35311f405da489137d8d438bfaa43b8d1e3f1b0'; \
             ;; \
         'x86_64') \
-            GHC_SHA256='78975575b8125ecf1f50f78b1016b14ea6e87abbf1fc39797af469d029c5d737'; \
+            GHC_SHA256='2fe2c3e0a07e4782530e8bf83eeda8ff6935e40d5450c1809abcdc6182c9c848'; \
             ;; \
         *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;; \
     esac; \