Heroku-18, Heroku-20 and Heroku-22 stack images updated

Change effective on 29 November 2022

We have updated the heroku-18, heroku-20 and heroku-22 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent stack image each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack image.

The Heroku-18 stack is deprecated and will reach end-of-life on April 30th, 2023. Please upgrade to a newer stack as soon as possible. See the Heroku-18 End-Of-Life FAQ for more details.

Changelog of packages

The following packages have been changed; a separate section for each stack (if applicable) lists packages that are only available at build time, but not at runtime.

Stack: heroku-18

  • Removed pgdg-keyring
  • Updated imagemagick from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated imagemagick-6-common from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated imagemagick-6.q16 from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libexpat1 from version 2.2.5-3ubuntu0.7 to 2.2.5-3ubuntu0.9
  • Updated libjbig0 from version 2.1-3.1build1 to 2.1-3.1ubuntu0.18.04.1
  • Updated libmagickcore-6.q16-3 from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libmagickcore-6.q16-3-extra from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libmagickwand-6.q16-3 from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libpq5 from version 15.0-1.pgdg18.04+1 to 15.1-1.pgdg18.04+1
  • Updated linux-libc-dev from version 4.15.0-196.207 to 4.15.0-197.208
  • Updated login from version 1:4.5-1ubuntu2.3 to 1:4.5-1ubuntu2.4
  • Updated passwd from version 1:4.5-1ubuntu2.3 to 1:4.5-1ubuntu2.4
  • Updated postgresql-client-14 from version 14.5-2.pgdg18.04+2 to 14.6-1.pgdg18.04+1
  • Updated postgresql-client-common from version 244.pgdg18.04+1 to 246.pgdg18.04+1

Updates to packages available at build time only

  • Updated libexpat1-dev from version 2.2.5-3ubuntu0.7 to 2.2.5-3ubuntu0.9
  • Updated libice-dev from version 2:1.0.9-2 to 2:1.0.9-2ubuntu0.18.04.1
  • Updated libice6 from version 2:1.0.9-2 to 2:1.0.9-2ubuntu0.18.04.1
  • Updated libjbig-dev from version 2.1-3.1build1 to 2.1-3.1ubuntu0.18.04.1
  • Updated libmagickcore-6-arch-config from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libmagickcore-6-headers from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libmagickcore-6.q16-dev from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libmagickwand-6-headers from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libmagickwand-6.q16-dev from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libmagickwand-dev from version 8:6.9.7.4+dfsg-16ubuntu6.13 to 8:6.9.7.4+dfsg-16ubuntu6.14
  • Updated libpq-dev from version 15.0-1.pgdg18.04+1 to 15.1-1.pgdg18.04+1
  • Updated libunbound2 from version 1.6.7-1ubuntu2.5 to 1.6.7-1ubuntu2.6
  • Updated postgresql-common from version 244.pgdg18.04+1 to 246.pgdg18.04+1
  • Updated postgresql-server-dev-14 from version 14.5-2.pgdg18.04+2 to 14.6-1.pgdg18.04+1

Stack: heroku-20

  • Removed pgdg-keyring
  • Updated libexpat1 from version 2.2.9-1ubuntu0.4 to 2.2.9-1ubuntu0.6
  • Updated libjbig0 from version 2.1-3.1build1 to 2.1-3.1ubuntu0.20.04.1
  • Updated libpq5 from version 15.0-1.pgdg20.04+1 to 15.1-1.pgdg20.04+1
  • Updated libsystemd0 from version 245.4-4ubuntu3.18 to 245.4-4ubuntu3.19
  • Updated libudev1 from version 245.4-4ubuntu3.18 to 245.4-4ubuntu3.19
  • Updated linux-libc-dev from version 5.4.0-131.147 to 5.4.0-132.148
  • Updated login from version 1:4.8.1-1ubuntu5.20.04.2 to 1:4.8.1-1ubuntu5.20.04.3
  • Updated passwd from version 1:4.8.1-1ubuntu5.20.04.2 to 1:4.8.1-1ubuntu5.20.04.3
  • Updated postgresql-client-14 from version 14.5-2.pgdg20.04+2 to 14.6-1.pgdg20.04+1
  • Updated postgresql-client-common from version 244.pgdg20.04+1 to 246.pgdg20.04+1
  • Updated tzdata from version 2022f-0ubuntu0.20.04.0 to 2022f-0ubuntu0.20.04.1

Updates to packages available at build time only

  • Updated cmake from version 3.16.3-1ubuntu1 to 3.16.3-1ubuntu1.20.04.1
  • Updated cmake-data from version 3.16.3-1ubuntu1 to 3.16.3-1ubuntu1.20.04.1
  • Updated libexpat1-dev from version 2.2.9-1ubuntu0.4 to 2.2.9-1ubuntu0.6
  • Updated libjbig-dev from version 2.1-3.1build1 to 2.1-3.1ubuntu0.20.04.1
  • Updated libpq-dev from version 15.0-1.pgdg20.04+1 to 15.1-1.pgdg20.04+1
  • Updated libsystemd-dev from version 245.4-4ubuntu3.18 to 245.4-4ubuntu3.19
  • Updated libudev-dev from version 245.4-4ubuntu3.18 to 245.4-4ubuntu3.19
  • Updated libunbound8 from version 1.9.4-2ubuntu1.3 to 1.9.4-2ubuntu1.4
  • Updated postgresql-common from version 244.pgdg20.04+1 to 246.pgdg20.04+1
  • Updated postgresql-server-dev-14 from version 14.5-2.pgdg20.04+2 to 14.6-1.pgdg20.04+1

Stack: heroku-22

  • Removed pgdg-keyring
  • Updated libexpat1 from version 2.4.7-1 to 2.4.7-1ubuntu0.2
  • Updated libgdk-pixbuf-2.0-0 from version 2.42.8+dfsg-1ubuntu0.1 to 2.42.8+dfsg-1ubuntu0.2
  • Updated libgdk-pixbuf2.0-common from version 2.42.8+dfsg-1ubuntu0.1 to 2.42.8+dfsg-1ubuntu0.2
  • Updated libjbig0 from version 2.1-3.1build3 to 2.1-3.1ubuntu0.22.04.1
  • Updated libpq5 from version 15.0-1.pgdg22.04+1 to 15.1-1.pgdg22.04+1
  • Updated linux-libc-dev from version 5.15.0-52.58 to 5.15.0-53.59
  • Updated login from version 1:4.8.1-2ubuntu2 to 1:4.8.1-2ubuntu2.1
  • Updated passwd from version 1:4.8.1-2ubuntu2 to 1:4.8.1-2ubuntu2.1
  • Updated postgresql-client-14 from version 14.5-2.pgdg22.04+2 to 14.6-1.pgdg22.04+1
  • Updated postgresql-client-common from version 244.pgdg22.04+1 to 246.pgdg22.04+1
  • Updated rsync from version 3.2.3-8ubuntu3 to 3.2.3-8ubuntu3.1
  • Updated tzdata from version 2022f-0ubuntu0.22.04.0 to 2022f-0ubuntu0.22.04.1

Updates to packages available at build time only

  • Updated gir1.2-gdkpixbuf-2.0 from version 2.42.8+dfsg-1ubuntu0.1 to 2.42.8+dfsg-1ubuntu0.2
  • Updated libexpat1-dev from version 2.4.7-1 to 2.4.7-1ubuntu0.2
  • Updated libgdk-pixbuf-2.0-dev from version 2.42.8+dfsg-1ubuntu0.1 to 2.42.8+dfsg-1ubuntu0.2
  • Updated libgdk-pixbuf2.0-bin from version 2.42.8+dfsg-1ubuntu0.1 to 2.42.8+dfsg-1ubuntu0.2
  • Updated libjbig-dev from version 2.1-3.1build3 to 2.1-3.1ubuntu0.22.04.1
  • Updated libpq-dev from version 15.0-1.pgdg22.04+1 to 15.1-1.pgdg22.04+1
  • Updated libunbound8 from version 1.13.1-1ubuntu5.2 to 1.13.1-1ubuntu5.3