Heroku-18 and Heroku-20 stack images updated

Change effective on 23 March 2022

We have updated the heroku-18 and heroku-20 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically over the next 24 hours. You do not need to redeploy your app or manually restart your dynos.

See this Dev Center article for an overview of the packages available in each stack image.

Changelog of packages

The following packages have been changed; a separate section for each stack (if applicable) lists packages that are only available at build time, but not at runtime.

Stack: heroku-18

  • Updated bind9-host from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated dnsutils from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated libbind9-160 from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated libdns1100 from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated libexpat1 from version 2.2.5-3ubuntu0.4 to 2.2.5-3ubuntu0.7
  • Updated libirs160 from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated libisc169 from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated libisccc160 from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated libisccfg160 from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated liblwres160 from version 1:9.11.3+dfsg-1ubuntu1.16 to 1:9.11.3+dfsg-1ubuntu1.17
  • Updated libssl1.0.0 from version 1.0.2n-1ubuntu5.7 to 1.0.2n-1ubuntu5.8
  • Updated libssl1.1 from version 1.1.1-1ubuntu2.1~18.04.14 to 1.1.1-1ubuntu2.1~18.04.15
  • Updated libxml2 from version 2.9.4+dfsg1-6.1ubuntu1.4 to 2.9.4+dfsg1-6.1ubuntu1.5
  • Updated linux-libc-dev from version 4.15.0-171.180 to 4.15.0-173.182
  • Updated openssl from version 1.1.1-1ubuntu2.1~18.04.14 to 1.1.1-1ubuntu2.1~18.04.15
  • Updated tar from version 1.29b-2ubuntu0.2 to 1.29b-2ubuntu0.3

Updates to packages available at build time only

  • Updated libexpat1-dev from version 2.2.5-3ubuntu0.4 to 2.2.5-3ubuntu0.7
  • Updated libssl-dev from version 1.1.1-1ubuntu2.1~18.04.14 to 1.1.1-1ubuntu2.1~18.04.15
  • Updated libxml2-dev from version 2.9.4+dfsg1-6.1ubuntu1.4 to 2.9.4+dfsg1-6.1ubuntu1.5

Stack: heroku-20

  • Updated bind9-dnsutils from version 1:9.16.1-0ubuntu2.9 to 1:9.16.1-0ubuntu2.10
  • Updated bind9-host from version 1:9.16.1-0ubuntu2.9 to 1:9.16.1-0ubuntu2.10
  • Updated bind9-libs from version 1:9.16.1-0ubuntu2.9 to 1:9.16.1-0ubuntu2.10
  • Updated cpp-9 from version 9.4.0-1ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04.1
  • Updated dnsutils from version 1:9.16.1-0ubuntu2.9 to 1:9.16.1-0ubuntu2.10
  • Updated gcc-9 from version 9.4.0-1ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04.1
  • Updated gcc-9-base from version 9.4.0-1ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04.1
  • Updated libasan5 from version 9.4.0-1ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04.1
  • Updated libexpat1 from version 2.2.9-1ubuntu0.2 to 2.2.9-1ubuntu0.4
  • Updated libgcc-9-dev from version 9.4.0-1ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04.1
  • Updated libssl1.1 from version 1.1.1f-1ubuntu2.11 to 1.1.1f-1ubuntu2.12
  • Updated libxml2 from version 2.9.10+dfsg-5ubuntu0.20.04.1 to 2.9.10+dfsg-5ubuntu0.20.04.2
  • Updated linux-libc-dev from version 5.4.0-104.118 to 5.4.0-105.119
  • Updated openssl from version 1.1.1f-1ubuntu2.11 to 1.1.1f-1ubuntu2.12
  • Updated tar from version 1.30+dfsg-7ubuntu0.20.04.1 to 1.30+dfsg-7ubuntu0.20.04.2

Updates to packages available at build time only

  • Updated g++-9 from version 9.4.0-1ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04.1
  • Updated libexpat1-dev from version 2.2.9-1ubuntu0.2 to 2.2.9-1ubuntu0.4
  • Updated libobjc-9-dev from version 9.4.0-1ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04.1
  • Updated libssl-dev from version 1.1.1f-1ubuntu2.11 to 1.1.1f-1ubuntu2.12
  • Updated libstdc++-9-dev from version 9.4.0-1ubuntu1~20.04 to 9.4.0-1ubuntu1~20.04.1
  • Updated libxml2-dev from version 2.9.10+dfsg-5ubuntu0.20.04.1 to 2.9.10+dfsg-5ubuntu0.20.04.2