Heroku-20 and Heroku-22 stack images updated

Change effective on 08 May 2023

We have updated the heroku-20 and heroku-22 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent stack image each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack image.

Changelog of packages

The following packages have been changed; a separate section for each stack (if applicable) lists packages that are only available at build time, but not at runtime.

Stack: heroku-20

  • Updated distro-info-data from version 0.43ubuntu1.12 to 0.43ubuntu1.13
  • Updated git from version 1:2.25.1-1ubuntu3.10 to 1:2.25.1-1ubuntu3.11
  • Updated git-man from version 1:2.25.1-1ubuntu3.10 to 1:2.25.1-1ubuntu3.11
  • Updated libruby2.7 from version 2.7.0-5ubuntu1.8 to 2.7.0-5ubuntu1.10
  • Updated libssl1.1 from version 1.1.1f-1ubuntu2.17 to 1.1.1f-1ubuntu2.18
  • Updated libxml2 from version 2.9.10+dfsg-5ubuntu0.20.04.5 to 2.9.10+dfsg-5ubuntu0.20.04.6
  • Updated linux-libc-dev from version 5.4.0-146.163 to 5.4.0-148.165
  • Updated openssl from version 1.1.1f-1ubuntu2.17 to 1.1.1f-1ubuntu2.18
  • Updated ruby2.7 from version 2.7.0-5ubuntu1.8 to 2.7.0-5ubuntu1.10
  • Updated tzdata from version 2023c-0ubuntu0.20.04.0 to 2023c-0ubuntu0.20.04.1

Updates to packages available at build time only

  • Updated libssl-dev from version 1.1.1f-1ubuntu2.17 to 1.1.1f-1ubuntu2.18
  • Updated libxml2-dev from version 2.9.10+dfsg-5ubuntu0.20.04.5 to 2.9.10+dfsg-5ubuntu0.20.04.6
  • Updated ruby2.7-dev from version 2.7.0-5ubuntu1.8 to 2.7.0-5ubuntu1.10

Stack: heroku-22

  • Updated apt from version 2.4.8 to 2.4.9
  • Updated apt-transport-https from version 2.4.8 to 2.4.9
  • Updated apt-utils from version 2.4.8 to 2.4.9
  • Updated distro-info-data from version 0.52ubuntu0.3 to 0.52ubuntu0.4
  • Updated git from version 1:2.34.1-1ubuntu1.8 to 1:2.34.1-1ubuntu1.9
  • Updated git-man from version 1:2.34.1-1ubuntu1.8 to 1:2.34.1-1ubuntu1.9
  • Updated libapt-pkg6.0 from version 2.4.8 to 2.4.9
  • Updated libglib2.0-0 from version 2.72.4-0ubuntu1 to 2.72.4-0ubuntu2
  • Updated libssl3 from version 3.0.2-0ubuntu1.8 to 3.0.2-0ubuntu1.9
  • Updated libxml2 from version 2.9.13+dfsg-1ubuntu0.2 to 2.9.13+dfsg-1ubuntu0.3
  • Updated linux-libc-dev from version 5.15.0-69.76 to 5.15.0-71.78
  • Updated openssl from version 3.0.2-0ubuntu1.8 to 3.0.2-0ubuntu1.9
  • Updated tzdata from version 2023c-0ubuntu0.22.04.0 to 2023c-0ubuntu0.22.04.1

Updates to packages available at build time only

  • Updated libapt-pkg-dev from version 2.4.8 to 2.4.9
  • Updated libglib2.0-bin from version 2.72.4-0ubuntu1 to 2.72.4-0ubuntu2
  • Updated libglib2.0-data from version 2.72.4-0ubuntu1 to 2.72.4-0ubuntu2
  • Updated libglib2.0-dev from version 2.72.4-0ubuntu1 to 2.72.4-0ubuntu2
  • Updated libglib2.0-dev-bin from version 2.72.4-0ubuntu1 to 2.72.4-0ubuntu2
  • Updated libssl-dev from version 3.0.2-0ubuntu1.8 to 3.0.2-0ubuntu1.9
  • Updated libxml2-dev from version 2.9.13+dfsg-1ubuntu0.2 to 2.9.13+dfsg-1ubuntu0.3