The docker images with the current PATCH version for the four latest MAJOR.MINOR versions of GHC – plus the MAJOR.MINOR version I consider recommended1 – are supported with security updates.
To report a vulnerability in one of the supported versions' docker images, email the maintainer olivier.benz@b-data.ch.
Vulnerabilities in docker images with prior versions of GHC are not fixed.
Whenever a new version of GHC is released, the previous PATCH version's docker image is rebuilt once again and then frozen.
Footnotes
-
See Dev Containers > Version Matrix. Possibly newer than the version recommended by GHCup. ↩