Heroku-18, Heroku-20 and Heroku-22 stack images updated

Change effective on 21 March 2023

We have updated the heroku-18, heroku-20 and heroku-22 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent stack image each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack image.

The Heroku-18 stack is deprecated and will reach end-of-life on April 30th, 2023. Please upgrade to a newer stack as soon as possible. See the Heroku-18 End-Of-Life FAQ for more details.

Changelog of packages

The following packages have been changed; a separate section for each stack (if applicable) lists packages that are only available at build time, but not at runtime.

Stack: heroku-18

  • Updated curl from version 7.58.0-2ubuntu3.23 to 7.58.0-2ubuntu3.24
  • Updated git from version 1:2.17.1-1ubuntu0.16 to 1:2.17.1-1ubuntu0.17
  • Updated git-man from version 1:2.17.1-1ubuntu0.16 to 1:2.17.1-1ubuntu0.17
  • Updated libcurl3-gnutls from version 7.58.0-2ubuntu3.23 to 7.58.0-2ubuntu3.24
  • Updated libcurl4 from version 7.58.0-2ubuntu3.23 to 7.58.0-2ubuntu3.24
  • Updated libgssapi-krb5-2 from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libk5crypto3 from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libkrb5-3 from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libkrb5support0 from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libopenjp2-7 from version 2.3.0-2build0.18.04.1 to 2.3.0-2+deb10u2build0.18.04.1
  • Updated libpython2.7-minimal from version 2.7.17-1~18.04ubuntu1.10 to 2.7.17-1~18.04ubuntu1.11
  • Updated libpython2.7-stdlib from version 2.7.17-1~18.04ubuntu1.10 to 2.7.17-1~18.04ubuntu1.11
  • Updated libpython3.6-minimal from version 3.6.9-1~18.04ubuntu1.9 to 3.6.9-1~18.04ubuntu1.12
  • Updated libpython3.6-stdlib from version 3.6.9-1~18.04ubuntu1.9 to 3.6.9-1~18.04ubuntu1.12
  • Updated libsystemd0 from version 237-3ubuntu10.56 to 237-3ubuntu10.57
  • Updated libtiff5 from version 4.0.9-5ubuntu0.9 to 4.0.9-5ubuntu0.10
  • Updated libudev1 from version 237-3ubuntu10.56 to 237-3ubuntu10.57
  • Updated linux-libc-dev from version 4.15.0-204.215 to 4.15.0-206.217
  • Updated postgresql-client-common from version 247.pgdg18.04+1 to 248.pgdg18.04+1
  • Updated python2.7 from version 2.7.17-1~18.04ubuntu1.10 to 2.7.17-1~18.04ubuntu1.11
  • Updated python2.7-minimal from version 2.7.17-1~18.04ubuntu1.10 to 2.7.17-1~18.04ubuntu1.11
  • Updated python3.6 from version 3.6.9-1~18.04ubuntu1.9 to 3.6.9-1~18.04ubuntu1.12
  • Updated python3.6-minimal from version 3.6.9-1~18.04ubuntu1.9 to 3.6.9-1~18.04ubuntu1.12
  • Updated rsync from version 3.1.2-2.1ubuntu1.5 to 3.1.2-2.1ubuntu1.6

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libcurl4-openssl-dev from version 7.58.0-2ubuntu3.23 to 7.58.0-2ubuntu3.24
  • Updated libgssrpc4 from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libkadm5clnt-mit11 from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libkadm5srv-mit11 from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libkdb5-9 from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libkrb5-dev from version 1.16-2ubuntu0.3 to 1.16-2ubuntu0.4
  • Updated libpython2.7 from version 2.7.17-1~18.04ubuntu1.10 to 2.7.17-1~18.04ubuntu1.11
  • Updated libpython2.7-dev from version 2.7.17-1~18.04ubuntu1.10 to 2.7.17-1~18.04ubuntu1.11
  • Updated libsystemd-dev from version 237-3ubuntu10.56 to 237-3ubuntu10.57
  • Updated libtiff-dev from version 4.0.9-5ubuntu0.9 to 4.0.9-5ubuntu0.10
  • Updated libtiff5-dev from version 4.0.9-5ubuntu0.9 to 4.0.9-5ubuntu0.10
  • Updated libtiffxx5 from version 4.0.9-5ubuntu0.9 to 4.0.9-5ubuntu0.10
  • Updated libudev-dev from version 237-3ubuntu10.56 to 237-3ubuntu10.57
  • Updated postgresql-common from version 247.pgdg18.04+1 to 248.pgdg18.04+1
  • Updated python2.7-dev from version 2.7.17-1~18.04ubuntu1.10 to 2.7.17-1~18.04ubuntu1.11

Stack: heroku-20

  • Updated base-files from version 11ubuntu5.6 to 11ubuntu5.7
  • Updated curl from version 7.68.0-1ubuntu2.16 to 7.68.0-1ubuntu2.18
  • Updated libcurl3-gnutls from version 7.68.0-1ubuntu2.16 to 7.68.0-1ubuntu2.18
  • Updated libcurl4 from version 7.68.0-1ubuntu2.16 to 7.68.0-1ubuntu2.18
  • Updated libgssapi-krb5-2 from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libk5crypto3 from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libkrb5-3 from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libkrb5support0 from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libpython3.8-minimal from version 3.8.10-0ubuntu1~20.04.6 to 3.8.10-0ubuntu1~20.04.7
  • Updated libpython3.8-stdlib from version 3.8.10-0ubuntu1~20.04.6 to 3.8.10-0ubuntu1~20.04.7
  • Updated libsystemd0 from version 245.4-4ubuntu3.19 to 245.4-4ubuntu3.20
  • Updated libtiff5 from version 4.1.0+git191117-2ubuntu0.20.04.7 to 4.1.0+git191117-2ubuntu0.20.04.8
  • Updated libudev1 from version 245.4-4ubuntu3.19 to 245.4-4ubuntu3.20
  • Updated linux-libc-dev from version 5.4.0-139.156 to 5.4.0-144.161
  • Updated postgresql-client-common from version 247.pgdg20.04+1 to 248.pgdg20.04+1
  • Updated python3.8 from version 3.8.10-0ubuntu1~20.04.6 to 3.8.10-0ubuntu1~20.04.7
  • Updated python3.8-minimal from version 3.8.10-0ubuntu1~20.04.6 to 3.8.10-0ubuntu1~20.04.7
  • Updated rsync from version 3.1.3-8ubuntu0.4 to 3.1.3-8ubuntu0.5

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libcurl4-openssl-dev from version 7.68.0-1ubuntu2.16 to 7.68.0-1ubuntu2.18
  • Updated libgssrpc4 from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libkadm5clnt-mit11 from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libkadm5srv-mit11 from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libkdb5-9 from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libkrb5-dev from version 1.17-6ubuntu4.2 to 1.17-6ubuntu4.3
  • Updated libpython3.8 from version 3.8.10-0ubuntu1~20.04.6 to 3.8.10-0ubuntu1~20.04.7
  • Updated libpython3.8-dev from version 3.8.10-0ubuntu1~20.04.6 to 3.8.10-0ubuntu1~20.04.7
  • Updated libsystemd-dev from version 245.4-4ubuntu3.19 to 245.4-4ubuntu3.20
  • Updated libtiff-dev from version 4.1.0+git191117-2ubuntu0.20.04.7 to 4.1.0+git191117-2ubuntu0.20.04.8
  • Updated libtiffxx5 from version 4.1.0+git191117-2ubuntu0.20.04.7 to 4.1.0+git191117-2ubuntu0.20.04.8
  • Updated libudev-dev from version 245.4-4ubuntu3.19 to 245.4-4ubuntu3.20
  • Updated postgresql-common from version 247.pgdg20.04+1 to 248.pgdg20.04+1
  • Updated python3.8-dev from version 3.8.10-0ubuntu1~20.04.6 to 3.8.10-0ubuntu1~20.04.7

Stack: heroku-22

  • Updated curl from version 7.81.0-1ubuntu1.8 to 7.81.0-1ubuntu1.10
  • Updated libapparmor1 from version 3.0.4-2ubuntu2.1 to 3.0.4-2ubuntu2.2
  • Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.8 to 7.81.0-1ubuntu1.10
  • Updated libcurl4 from version 7.81.0-1ubuntu1.8 to 7.81.0-1ubuntu1.10
  • Updated libldap-2.5-0 from version 2.5.13+dfsg-0ubuntu0.22.04.1 to 2.5.14+dfsg-0ubuntu0.22.04.1
  • Updated libpango-1.0-0 from version 1.50.6+ds-2 to 1.50.6+ds-2ubuntu1
  • Updated libpangocairo-1.0-0 from version 1.50.6+ds-2 to 1.50.6+ds-2ubuntu1
  • Updated libpangoft2-1.0-0 from version 1.50.6+ds-2 to 1.50.6+ds-2ubuntu1
  • Updated libpython3.10-minimal from version 3.10.6-1~22.04.2 to 3.10.6-1~22.04.2ubuntu1
  • Updated libpython3.10-stdlib from version 3.10.6-1~22.04.2 to 3.10.6-1~22.04.2ubuntu1
  • Updated libsasl2-2 from version 2.1.27+dfsg2-3ubuntu1.1 to 2.1.27+dfsg2-3ubuntu1.2
  • Updated libsasl2-modules from version 2.1.27+dfsg2-3ubuntu1.1 to 2.1.27+dfsg2-3ubuntu1.2
  • Updated libsasl2-modules-db from version 2.1.27+dfsg2-3ubuntu1.1 to 2.1.27+dfsg2-3ubuntu1.2
  • Updated libsystemd0 from version 249.11-0ubuntu3.6 to 249.11-0ubuntu3.7
  • Updated libtiff5 from version 4.3.0-6ubuntu0.3 to 4.3.0-6ubuntu0.4
  • Updated libudev1 from version 249.11-0ubuntu3.6 to 249.11-0ubuntu3.7
  • Updated linux-libc-dev from version 5.15.0-60.66 to 5.15.0-67.74
  • Updated postgresql-client-common from version 247.pgdg22.04+1 to 248.pgdg22.04+1
  • Updated python3.10 from version 3.10.6-1~22.04.2 to 3.10.6-1~22.04.2ubuntu1
  • Updated python3.10-minimal from version 3.10.6-1~22.04.2 to 3.10.6-1~22.04.2ubuntu1
  • Updated rsync from version 3.2.3-8ubuntu3.1 to 3.2.7-0ubuntu0.22.04.2
  • Updated systemd from version 249.11-0ubuntu3.6 to 249.11-0ubuntu3.7

Updates to packages available at build time only

  • Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.8 to 7.81.0-1ubuntu1.10
  • Updated libldap-dev from version 2.5.13+dfsg-0ubuntu0.22.04.1 to 2.5.14+dfsg-0ubuntu0.22.04.1
  • Updated libldap2-dev from version 2.5.13+dfsg-0ubuntu0.22.04.1 to 2.5.14+dfsg-0ubuntu0.22.04.1
  • Updated libpython3.10 from version 3.10.6-1~22.04.2 to 3.10.6-1~22.04.2ubuntu1
  • Updated libpython3.10-dev from version 3.10.6-1~22.04.2 to 3.10.6-1~22.04.2ubuntu1
  • Updated libsasl2-dev from version 2.1.27+dfsg2-3ubuntu1.1 to 2.1.27+dfsg2-3ubuntu1.2
  • Updated libsystemd-dev from version 249.11-0ubuntu3.6 to 249.11-0ubuntu3.7
  • Updated libtiff-dev from version 4.3.0-6ubuntu0.3 to 4.3.0-6ubuntu0.4
  • Updated libtiffxx5 from version 4.3.0-6ubuntu0.3 to 4.3.0-6ubuntu0.4
  • Updated libudev-dev from version 249.11-0ubuntu3.6 to 249.11-0ubuntu3.7
  • Updated python3.10-dev from version 3.10.6-1~22.04.2 to 3.10.6-1~22.04.2ubuntu1