Heroku-16, Heroku-18 and Heroku-20 Stack Images Updated

Change effective on 07 April 2021

We have updated the heroku-16, heroku-18 and heroku-20 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically over the next 24 hours. You do not need to redeploy your app or manually restart your dynos.

See this Dev Center article for an overview of the packages available in each stack image.

The Heroku-16 stack is deprecated and will be end-of-life on May 1st, 2021. Please upgrade to a newer stack as soon as possible. See the Heroku-16 End-Of-Life FAQ for more details.

Changelog of packages

The following packages have been changed; a separate section for each stack (if applicable) lists packages that are only available at build time, but not at runtime.

Stack: heroku-16

  • Updated curl from version 7.47.0-1ubuntu2.18 to 7.47.0-1ubuntu2.19
  • Updated libcurl3 from version 7.47.0-1ubuntu2.18 to 7.47.0-1ubuntu2.19
  • Updated libcurl3-gnutls from version 7.47.0-1ubuntu2.18 to 7.47.0-1ubuntu2.19
  • Updated libopenexr22 from version 2.2.0-10ubuntu2.4 to 2.2.0-10ubuntu2.6

Updates to packages available at build time only

  • Updated libcurl4-openssl-dev from version 7.47.0-1ubuntu2.18 to 7.47.0-1ubuntu2.19
  • Updated libopenexr-dev from version 2.2.0-10ubuntu2.4 to 2.2.0-10ubuntu2.6

Stack: heroku-18

  • Updated curl from version 7.58.0-2ubuntu3.12 to 7.58.0-2ubuntu3.13
  • Updated libcurl3-gnutls from version 7.58.0-2ubuntu3.12 to 7.58.0-2ubuntu3.13
  • Updated libcurl4 from version 7.58.0-2ubuntu3.12 to 7.58.0-2ubuntu3.13
  • Updated libopenexr22 from version 2.2.0-11.1ubuntu1.4 to 2.2.0-11.1ubuntu1.6
  • Updated libssl1.1 from version 1.1.1-1ubuntu2.1~18.04.8 to 1.1.1-1ubuntu2.1~18.04.9
  • Updated linux-libc-dev from version 4.15.0-139.143 to 4.15.0-140.144
  • Updated openssl from version 1.1.1-1ubuntu2.1~18.04.8 to 1.1.1-1ubuntu2.1~18.04.9
  • Updated ubuntu-keyring from version 2018.09.18.1~18.04.0 to 2018.09.18.1~18.04.2

Updates to packages available at build time only

  • Updated libcurl4-openssl-dev from version 7.58.0-2ubuntu3.12 to 7.58.0-2ubuntu3.13
  • Updated libopenexr-dev from version 2.2.0-11.1ubuntu1.4 to 2.2.0-11.1ubuntu1.6
  • Updated libssl-dev from version 1.1.1-1ubuntu2.1~18.04.8 to 1.1.1-1ubuntu2.1~18.04.9

Stack: heroku-20

  • Updated curl from version 7.68.0-1ubuntu2.4 to 7.68.0-1ubuntu2.5
  • Updated libcurl3-gnutls from version 7.68.0-1ubuntu2.4 to 7.68.0-1ubuntu2.5
  • Updated libcurl4 from version 7.68.0-1ubuntu2.4 to 7.68.0-1ubuntu2.5
  • Updated libopenexr24 from version 2.3.0-6ubuntu0.3 to 2.3.0-6ubuntu0.5
  • Updated libssl1.1 from version 1.1.1f-1ubuntu2.2 to 1.1.1f-1ubuntu2.3
  • Updated linux-libc-dev from version 5.4.0-67.75 to 5.4.0-70.78
  • Updated openssl from version 1.1.1f-1ubuntu2.2 to 1.1.1f-1ubuntu2.3
  • Updated ubuntu-keyring from version 2020.02.11.2 to 2020.02.11.4

Updates to packages available at build time only

  • Updated libcurl4-openssl-dev from version 7.68.0-1ubuntu2.4 to 7.68.0-1ubuntu2.5
  • Updated libopenexr-dev from version 2.3.0-6ubuntu0.3 to 2.3.0-6ubuntu0.5
  • Updated libssl-dev from version 1.1.1f-1ubuntu2.2 to 1.1.1f-1ubuntu2.3
  • Updated python3-pygments from version 2.3.1+dfsg-1ubuntu2.1 to 2.3.1+dfsg-1ubuntu2.2