The docker images with the current PATCH version for the three latest MAJOR.MINOR versions of GHC – plus the MAJOR.MINOR version I consider recommended¹ – are supported with security updates.

linux/riscv64 docker images are currently built only once. Therefore, vulnerabilities for this os/arch will not be fixed.

To report a vulnerability in one of the supported versions' docker images, email the maintainer [email protected].

Vulnerabilities in docker images with prior versions of GHC are not fixed.

Whenever a new version of GHC is released, the previous PATCH version's docker image is rebuilt once again and then frozen.