Heroku-18, Heroku-20 and Heroku-22 Stack Images Updated

Change effective on 01 August 2022

We have updated the heroku-18, heroku-20 and heroku-22 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically over the next 24 hours. You do not need to redeploy your app or manually restart your dynos.

See this Dev Center article for an overview of the packages available in each stack image.

The Heroku-18 stack is deprecated and will reach end-of-life on April 30th, 2023. Please upgrade to a newer stack as soon as possible. See the Heroku-18 End-Of-Life FAQ for more details.

This release reverts a prior heroku-22 specific change change to /etc/ssl/openssl.cnf that was put in place to temporarily work around an OpenSSL v3 incompatibility with Node.js 16 and older. Node.js versions 14.20.0 and 16.16.0, released in early July, no longer use the system-wide openssl.cnf during initialization; customers using heroku-22 are encouraged to update to these versions or upgrade to Node.js version 18.

Changelog of packages

The following packages have been changed; a separate section for each stack (if applicable) lists packages that are only available at build time, but not at runtime.

Stack: heroku-18

  • Updated libfreetype6 from version 2.8.1-2ubuntu2.1 to 2.8.1-2ubuntu2.2
  • Updated libmysqlclient20 from version 5.7.38-0ubuntu0.18.04.1 to 5.7.39-0ubuntu0.18.04.2

Updates to packages available at build time only

  • Updated libfreetype6-dev from version 2.8.1-2ubuntu2.1 to 2.8.1-2ubuntu2.2
  • Updated libmysqlclient-dev from version 5.7.38-0ubuntu0.18.04.1 to 5.7.39-0ubuntu0.18.04.2

Stack: heroku-20

  • Updated libfreetype6 from version 2.10.1-2ubuntu0.1 to 2.10.1-2ubuntu0.2
  • Updated libharfbuzz0b from version 2.6.4-1ubuntu4 to 2.6.4-1ubuntu4.2
  • Updated libmysqlclient21 from version 8.0.29-0ubuntu0.20.04.3 to 8.0.30-0ubuntu0.20.04.2

Updates to packages available at build time only

  • Updated libfreetype-dev from version 2.10.1-2ubuntu0.1 to 2.10.1-2ubuntu0.2
  • Updated libfreetype6-dev from version 2.10.1-2ubuntu0.1 to 2.10.1-2ubuntu0.2
  • Updated libmysqlclient-dev from version 8.0.29-0ubuntu0.20.04.3 to 8.0.30-0ubuntu0.20.04.2

Stack: heroku-22

  • Updated apt from version 2.4.5 to 2.4.6
  • Updated apt-transport-https from version 2.4.5 to 2.4.6
  • Updated apt-utils from version 2.4.5 to 2.4.6
  • Updated base-files from version 12ubuntu4.1 to 12ubuntu4.2
  • Updated language-pack-en from version 1:22.04+20220415 to 1:22.04+20220721
  • Updated language-pack-en-base from version 1:22.04+20220415 to 1:22.04+20220721
  • Updated libapt-pkg6.0 from version 2.4.5 to 2.4.6
  • Updated libc-bin from version 2.35-0ubuntu3 to 2.35-0ubuntu3.1
  • Updated libc-dev-bin from version 2.35-0ubuntu3 to 2.35-0ubuntu3.1
  • Updated libc6 from version 2.35-0ubuntu3 to 2.35-0ubuntu3.1
  • Updated libc6-dev from version 2.35-0ubuntu3 to 2.35-0ubuntu3.1
  • Updated libfreetype6 from version 2.11.1+dfsg-1build1 to 2.11.1+dfsg-1ubuntu0.1
  • Updated libharfbuzz0b from version 2.7.4-1ubuntu3 to 2.7.4-1ubuntu3.1
  • Updated libmysqlclient21 from version 8.0.29-0ubuntu0.22.04.2 to 8.0.30-0ubuntu0.22.04.1
  • Updated libtirpc-common from version 1.3.2-2build1 to 1.3.2-2ubuntu0.1
  • Updated libtirpc-dev from version 1.3.2-2build1 to 1.3.2-2ubuntu0.1
  • Updated libtirpc3 from version 1.3.2-2build1 to 1.3.2-2ubuntu0.1
  • Updated linux-libc-dev from version 5.15.0-41.44 to 5.15.0-43.46
  • Updated locales from version 2.35-0ubuntu3 to 2.35-0ubuntu3.1

Updates to packages available at build time only

  • Updated libapt-pkg-dev from version 2.4.5 to 2.4.6
  • Updated libfreetype-dev from version 2.11.1+dfsg-1build1 to 2.11.1+dfsg-1ubuntu0.1
  • Updated libfreetype6-dev from version 2.11.1+dfsg-1build1 to 2.11.1+dfsg-1ubuntu0.1
  • Updated libmysqlclient-dev from version 8.0.29-0ubuntu0.22.04.2 to 8.0.30-0ubuntu0.22.04.1