Heroku-20 and Heroku-22 stack images updated

Change effective on 07 August 2023

We have updated the heroku-20 and heroku-22 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent stack image each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack image.

Changelog of packages

Stack: heroku-20

• Updated curl from version 7.68.0-1ubuntu2.18 to 7.68.0-1ubuntu2.19
• Updated gcc-10-base from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libatomic1 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libcc1-0 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libcurl3-gnutls from version 7.68.0-1ubuntu2.18 to 7.68.0-1ubuntu2.19
• Updated libcurl4 from version 7.68.0-1ubuntu2.18 to 7.68.0-1ubuntu2.19
• Updated libgcc-s1 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libgfortran5 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libgomp1 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libitm1 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated liblsan0 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libmysqlclient21 from version 8.0.33-0ubuntu0.20.04.2 to 8.0.33-0ubuntu0.20.04.4
• Updated libpoppler-glib8 from version 0.86.1-0ubuntu1.1 to 0.86.1-0ubuntu1.2
• Updated libpoppler97 from version 0.86.1-0ubuntu1.1 to 0.86.1-0ubuntu1.2
• Updated libquadmath0 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated librsvg2-2 from version 2.48.9-1ubuntu0.20.04.1 to 2.48.9-1ubuntu0.20.04.4
• Updated librsvg2-common from version 2.48.9-1ubuntu0.20.04.1 to 2.48.9-1ubuntu0.20.04.4
• Updated libstdc++6 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libtsan0 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libubsan1 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated linux-libc-dev from version 5.4.0-153.170 to 5.4.0-155.172
• Updated openssh-client from version 1:8.2p1-4ubuntu0.7 to 1:8.2p1-4ubuntu0.8
• Updated openssh-server from version 1:8.2p1-4ubuntu0.7 to 1:8.2p1-4ubuntu0.8
• Updated openssh-sftp-server from version 1:8.2p1-4ubuntu0.7 to 1:8.2p1-4ubuntu0.8
• Updated poppler-utils from version 0.86.1-0ubuntu1.1 to 0.86.1-0ubuntu1.2

Updates to packages available at build time only

• Updated gir1.2-rsvg-2.0 from version 2.48.9-1ubuntu0.20.04.1 to 2.48.9-1ubuntu0.20.04.4
• Updated lib32gcc-s1 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated lib32stdc++6 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated libcurl4-openssl-dev from version 7.68.0-1ubuntu2.18 to 7.68.0-1ubuntu2.19
• Updated libmysqlclient-dev from version 8.0.33-0ubuntu0.20.04.2 to 8.0.33-0ubuntu0.20.04.4
• Updated libobjc4 from version 10.3.0-1ubuntu1~20.04 to 10.5.0-1ubuntu1~20.04
• Updated librsvg2-dev from version 2.48.9-1ubuntu0.20.04.1 to 2.48.9-1ubuntu0.20.04.4

Stack: heroku-22

• Updated base-files from version 12ubuntu4.3 to 12ubuntu4.4
• Updated binutils from version 2.38-4ubuntu2.2 to 2.38-4ubuntu2.3
• Updated binutils-common from version 2.38-4ubuntu2.2 to 2.38-4ubuntu2.3
• Updated binutils-x86-64-linux-gnu from version 2.38-4ubuntu2.2 to 2.38-4ubuntu2.3
• Updated cpp-11 from version 11.3.0-1ubuntu1~22.04.1 to 11.4.0-1ubuntu1~22.04
• Updated curl from version 7.81.0-1ubuntu1.10 to 7.81.0-1ubuntu1.13
• Updated gcc-11 from version 11.3.0-1ubuntu1~22.04.1 to 11.4.0-1ubuntu1~22.04
• Updated gcc-11-base from version 11.3.0-1ubuntu1~22.04.1 to 11.4.0-1ubuntu1~22.04
• Updated gcc-12-base from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated language-pack-en from version 1:22.04+20230209 to 1:22.04+20230801
• Updated language-pack-en-base from version 1:22.04+20230209 to 1:22.04+20230801
• Updated libasan6 from version 11.3.0-1ubuntu1~22.04.1 to 11.4.0-1ubuntu1~22.04
• Updated libatomic1 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated libbinutils from version 2.38-4ubuntu2.2 to 2.38-4ubuntu2.3
• Updated libcc1-0 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated libctf-nobfd0 from version 2.38-4ubuntu2.2 to 2.38-4ubuntu2.3
• Updated libctf0 from version 2.38-4ubuntu2.2 to 2.38-4ubuntu2.3
• Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.10 to 7.81.0-1ubuntu1.13
• Updated libcurl4 from version 7.81.0-1ubuntu1.10 to 7.81.0-1ubuntu1.13
• Updated libgcc-11-dev from version 11.3.0-1ubuntu1~22.04.1 to 11.4.0-1ubuntu1~22.04
• Updated libgcc-s1 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated libgomp1 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated libitm1 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated libldap-2.5-0 from version 2.5.14+dfsg-0ubuntu0.22.04.2 to 2.5.15+dfsg-0ubuntu0.22.04.1
• Updated liblsan0 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated libmysqlclient21 from version 8.0.33-0ubuntu0.22.04.2 to 8.0.33-0ubuntu0.22.04.4
• Updated libpoppler-glib8 from version 22.02.0-2ubuntu0.1 to 22.02.0-2ubuntu0.2
• Updated libpoppler118 from version 22.02.0-2ubuntu0.1 to 22.02.0-2ubuntu0.2
• Updated libpython3.10-minimal from version 3.10.6-1~22.04.2ubuntu1.1 to 3.10.12-1~22.04.2
• Updated libpython3.10-stdlib from version 3.10.6-1~22.04.2ubuntu1.1 to 3.10.12-1~22.04.2
• Updated libquadmath0 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated librsvg2-2 from version 2.52.5+dfsg-3 to 2.52.5+dfsg-3ubuntu0.2
• Updated librsvg2-common from version 2.52.5+dfsg-3 to 2.52.5+dfsg-3ubuntu0.2
• Updated libstdc++6 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated libtsan0 from version 11.3.0-1ubuntu1~22.04.1 to 11.4.0-1ubuntu1~22.04
• Updated libubsan1 from version 12.1.0-2ubuntu1~22.04 to 12.3.0-1ubuntu1~22.04
• Updated linux-libc-dev from version 5.15.0-76.83 to 5.15.0-78.85
• Updated openssh-client from version 1:8.9p1-3ubuntu0.1 to 1:8.9p1-3ubuntu0.3
• Updated openssh-server from version 1:8.9p1-3ubuntu0.1 to 1:8.9p1-3ubuntu0.3
• Updated openssh-sftp-server from version 1:8.9p1-3ubuntu0.1 to 1:8.9p1-3ubuntu0.3
• Updated poppler-utils from version 22.02.0-2ubuntu0.1 to 22.02.0-2ubuntu0.2
• Updated python3.10 from version 3.10.6-1~22.04.2ubuntu1.1 to 3.10.12-1~22.04.2
• Updated python3.10-minimal from version 3.10.6-1~22.04.2ubuntu1.1 to 3.10.12-1~22.04.2

Updates to packages available at build time only

• Updated g++-11 from version 11.3.0-1ubuntu1~22.04.1 to 11.4.0-1ubuntu1~22.04
• Updated gir1.2-rsvg-2.0 from version 2.52.5+dfsg-3 to 2.52.5+dfsg-3ubuntu0.2
• Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.10 to 7.81.0-1ubuntu1.13
• Updated libldap-dev from version 2.5.14+dfsg-0ubuntu0.22.04.2 to 2.5.15+dfsg-0ubuntu0.22.04.1
• Updated libldap2-dev from version 2.5.14+dfsg-0ubuntu0.22.04.2 to 2.5.15+dfsg-0ubuntu0.22.04.1
• Updated libmysqlclient-dev from version 8.0.33-0ubuntu0.22.04.2 to 8.0.33-0ubuntu0.22.04.4
• Updated libpython3.10 from version 3.10.6-1~22.04.2ubuntu1.1 to 3.10.12-1~22.04.2
• Updated libpython3.10-dev from version 3.10.6-1~22.04.2ubuntu1.1 to 3.10.12-1~22.04.2
• Updated librsvg2-dev from version 2.52.5+dfsg-3 to 2.52.5+dfsg-3ubuntu0.2
• Updated libstdc++-11-dev from version 11.3.0-1ubuntu1~22.04.1 to 11.4.0-1ubuntu1~22.04
• Updated python3-distutils from version 3.10.6-1~22.04 to 3.10.8-1~22.04
• Updated python3-lib2to3 from version 3.10.6-1~22.04 to 3.10.8-1~22.04
• Updated python3.10-dev from version 3.10.6-1~22.04.2ubuntu1.1 to 3.10.12-1~22.04.2