Heroku-18 and Heroku-20 stack images updated

Change effective on 09 March 2022

We have updated the heroku-18 and heroku-20 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically over the next 24 hours. You do not need to redeploy your app or manually restart your dynos.

See this Dev Center article for an overview of the packages available in each stack image.

Changelog of packages

The following packages have been changed; a separate section for each stack (if applicable) lists packages that are only available at build time, but not at runtime.

Stack: heroku-18

  • Updated libc-bin from version 2.27-3ubuntu1.4 to 2.27-3ubuntu1.5
  • Updated libc-dev-bin from version 2.27-3ubuntu1.4 to 2.27-3ubuntu1.5
  • Updated libc6 from version 2.27-3ubuntu1.4 to 2.27-3ubuntu1.5
  • Updated libc6-dev from version 2.27-3ubuntu1.4 to 2.27-3ubuntu1.5
  • Updated libexpat1 from version 2.2.5-3ubuntu0.2 to 2.2.5-3ubuntu0.4
  • Updated libsasl2-2 from version 2.1.27~101-g0780600+dfsg-3ubuntu2.3 to 2.1.27~101-g0780600+dfsg-3ubuntu2.4
  • Updated libsasl2-modules from version 2.1.27~101-g0780600+dfsg-3ubuntu2.3 to 2.1.27~101-g0780600+dfsg-3ubuntu2.4
  • Updated libsasl2-modules-db from version 2.1.27~101-g0780600+dfsg-3ubuntu2.3 to 2.1.27~101-g0780600+dfsg-3ubuntu2.4
  • Updated linux-libc-dev from version 4.15.0-167.175 to 4.15.0-171.180
  • Updated locales from version 2.27-3ubuntu1.4 to 2.27-3ubuntu1.5
  • Updated multiarch-support from version 2.27-3ubuntu1.4 to 2.27-3ubuntu1.5
  • Updated rsync from version 3.1.2-2.1ubuntu1.2 to 3.1.2-2.1ubuntu1.3

Updates to packages available at build time only

  • Updated libc6-i386 from version 2.27-3ubuntu1.4 to 2.27-3ubuntu1.5
  • Updated libexpat1-dev from version 2.2.5-3ubuntu0.2 to 2.2.5-3ubuntu0.4
  • Updated libsasl2-dev from version 2.1.27~101-g0780600+dfsg-3ubuntu2.3 to 2.1.27~101-g0780600+dfsg-3ubuntu2.4

Stack: heroku-20

  • Updated cpp-9 from version 9.3.0-17ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04
  • Updated gcc-9 from version 9.3.0-17ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04
  • Updated gcc-9-base from version 9.3.0-17ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04
  • Updated libasan5 from version 9.3.0-17ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04
  • Updated libc-bin from version 2.31-0ubuntu9.2 to 2.31-0ubuntu9.7
  • Updated libc-dev-bin from version 2.31-0ubuntu9.2 to 2.31-0ubuntu9.7
  • Updated libc6 from version 2.31-0ubuntu9.2 to 2.31-0ubuntu9.7
  • Updated libc6-dev from version 2.31-0ubuntu9.2 to 2.31-0ubuntu9.7
  • Updated libexpat1 from version 2.2.9-1build1 to 2.2.9-1ubuntu0.2
  • Updated libgcc-9-dev from version 9.3.0-17ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04
  • Updated libsasl2-2 from version 2.1.27+dfsg-2 to 2.1.27+dfsg-2ubuntu0.1
  • Updated libsasl2-modules from version 2.1.27+dfsg-2 to 2.1.27+dfsg-2ubuntu0.1
  • Updated libsasl2-modules-db from version 2.1.27+dfsg-2 to 2.1.27+dfsg-2ubuntu0.1
  • Updated libssl1.1 from version 1.1.1f-1ubuntu2.10 to 1.1.1f-1ubuntu2.11
  • Updated linux-libc-dev from version 5.4.0-100.113 to 5.4.0-104.118
  • Updated locales from version 2.31-0ubuntu9.2 to 2.31-0ubuntu9.7
  • Updated openssl from version 1.1.1f-1ubuntu2.10 to 1.1.1f-1ubuntu2.11
  • Updated rsync from version 3.1.3-8ubuntu0.1 to 3.1.3-8ubuntu0.2

Updates to packages available at build time only

  • Updated g++-9 from version 9.3.0-17ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04
  • Updated libc6-i386 from version 2.31-0ubuntu9.2 to 2.31-0ubuntu9.7
  • Updated libexpat1-dev from version 2.2.9-1build1 to 2.2.9-1ubuntu0.2
  • Updated libobjc-9-dev from version 9.3.0-17ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04
  • Updated libsasl2-dev from version 2.1.27+dfsg-2 to 2.1.27+dfsg-2ubuntu0.1
  • Updated libssl-dev from version 1.1.1f-1ubuntu2.10 to 1.1.1f-1ubuntu2.11
  • Updated libstdc++-9-dev from version 9.3.0-17ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04