Change effective on 13 September 2018
We have updated the Cedar-14, Heroku-16, and Heroku-18 stack images to address security notices in multiple packages. The new stack images will be rolled out automatically in the next 24 hours. You do not need to redeploy your app or restart your dynos.
We also included the following new packages:
Heroku-18: libzip, libxcb-shm0 Heroku-16: libzip
See this Dev Center article for an overview of the libraries available on the Cedar-14, Heroku-16, and Heroku-18 stack images.