Heroku-18, Heroku-20 and Heroku-22 stack images updated

Change effective on 24 January 2023

We have updated the heroku-18, heroku-20 and heroku-22 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent stack image each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack image.

The Heroku-18 stack is deprecated and will reach end-of-life on April 30th, 2023. Please upgrade to a newer stack as soon as possible. See the Heroku-18 End-Of-Life FAQ for more details.

Changelog of packages

The following packages have been changed; a separate section for each stack (if applicable) lists packages that are only available at build time, but not at runtime.

Stack: heroku-18

  • Updated git from version 1:2.17.1-1ubuntu0.13 to 1:2.17.1-1ubuntu0.15
  • Updated git-man from version 1:2.17.1-1ubuntu0.13 to 1:2.17.1-1ubuntu0.15
  • Updated libasn1-8-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libgssapi3-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libhcrypto4-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libheimbase1-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libheimntlm0-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libhx509-5-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libkrb5-26-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libroken18-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libruby2.5 from version 2.5.1-1ubuntu1.12 to 2.5.1-1ubuntu1.13
  • Updated libwind0-heimdal from version 7.5.0+dfsg-1ubuntu0.2 to 7.5.0+dfsg-1ubuntu0.3
  • Updated libxpm4 from version 1:3.5.12-1 to 1:3.5.12-1ubuntu0.18.04.2
  • Updated linux-libc-dev from version 4.15.0-201.212 to 4.15.0-202.213
  • Updated ruby2.5 from version 2.5.1-1ubuntu1.12 to 2.5.1-1ubuntu1.13

Updates to packages available at build time only

  • Updated libxpm-dev from version 1:3.5.12-1 to 1:3.5.12-1ubuntu0.18.04.2
  • Updated ruby2.5-dev from version 2.5.1-1ubuntu1.12 to 2.5.1-1ubuntu1.13

Stack: heroku-20

  • Updated git from version 1:2.25.1-1ubuntu3.6 to 1:2.25.1-1ubuntu3.8
  • Updated git-man from version 1:2.25.1-1ubuntu3.6 to 1:2.25.1-1ubuntu3.8
  • Updated libasn1-8-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libgssapi3-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libhcrypto4-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libheimbase1-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libheimntlm0-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libhx509-5-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libkrb5-26-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libroken18-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libwind0-heimdal from version 7.7.0+dfsg-1ubuntu1.2 to 7.7.0+dfsg-1ubuntu1.3
  • Updated libxpm4 from version 1:3.5.12-1 to 1:3.5.12-1ubuntu0.20.04.1
  • Updated linux-libc-dev from version 5.4.0-136.153 to 5.4.0-137.154

Updates to packages available at build time only

  • Updated libxpm-dev from version 1:3.5.12-1 to 1:3.5.12-1ubuntu0.20.04.1
  • Updated python3-urllib3 from version 1.25.8-2ubuntu0.1 to 1.25.8-2ubuntu0.2

Stack: heroku-22

  • Updated ca-certificates-java from version 20190909 to 20190909ubuntu1.1
  • Updated git from version 1:2.34.1-1ubuntu1.5 to 1:2.34.1-1ubuntu1.6
  • Updated git-man from version 1:2.34.1-1ubuntu1.5 to 1:2.34.1-1ubuntu1.6
  • Updated libxpm4 from version 1:3.5.12-1build2 to 1:3.5.12-1ubuntu0.22.04.1
  • Updated linux-libc-dev from version 5.15.0-57.63 to 5.15.0-58.64
  • Updated openssh-client from version 1:8.9p1-3 to 1:8.9p1-3ubuntu0.1
  • Updated openssh-server from version 1:8.9p1-3 to 1:8.9p1-3ubuntu0.1
  • Updated openssh-sftp-server from version 1:8.9p1-3 to 1:8.9p1-3ubuntu0.1

Updates to packages available at build time only

  • Updated libxpm-dev from version 1:3.5.12-1build2 to 1:3.5.12-1ubuntu0.22.04.1