Heroku-20 and Heroku-22 stack images updated

Change effective on 28 November 2023

We have updated the heroku-20 and heroku-22 stack images to pick up security fixes in upstream packages. The new stack images will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent stack image each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack image.

Changelog of packages

Stack: heroku-20

  • Updated apt from version 2.0.9 to 2.0.10
  • Updated apt-transport-https from version 2.0.9 to 2.0.10
  • Updated apt-utils from version 2.0.9 to 2.0.10
  • Updated libapt-pkg6.0 from version 2.0.9 to 2.0.10
  • Updated libavahi-client3 from version 0.7-4ubuntu7.2 to 0.7-4ubuntu7.3
  • Updated libavahi-common-data from version 0.7-4ubuntu7.2 to 0.7-4ubuntu7.3
  • Updated libavahi-common3 from version 0.7-4ubuntu7.2 to 0.7-4ubuntu7.3
  • Updated libgnutls-openssl27 from version 3.6.13-2ubuntu1.8 to 3.6.13-2ubuntu1.9
  • Updated libgnutls30 from version 3.6.13-2ubuntu1.8 to 3.6.13-2ubuntu1.9
  • Updated libgnutlsxx28 from version 3.6.13-2ubuntu1.8 to 3.6.13-2ubuntu1.9
  • Updated libgssapi-krb5-2 from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libk5crypto3 from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libkrb5-3 from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libkrb5support0 from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libnghttp2-14 from version 1.40.0-1ubuntu0.1 to 1.40.0-1ubuntu0.2
  • Updated libperl5.30 from version 5.30.0-9ubuntu0.4 to 5.30.0-9ubuntu0.5
  • Updated libpoppler-glib8 from version 0.86.1-0ubuntu1.3 to 0.86.1-0ubuntu1.4
  • Updated libpoppler97 from version 0.86.1-0ubuntu1.3 to 0.86.1-0ubuntu1.4
  • Updated libpq5 from version 16.0-1.pgdg20.04+1 to 16.1-1.pgdg20.04+1
  • Updated libprocps8 from version 2:3.3.16-1ubuntu2.3 to 2:3.3.16-1ubuntu2.4
  • Updated libpython3.8-minimal from version 3.8.10-0ubuntu1~20.04.8 to 3.8.10-0ubuntu1~20.04.9
  • Updated libpython3.8-stdlib from version 3.8.10-0ubuntu1~20.04.8 to 3.8.10-0ubuntu1~20.04.9
  • Updated libtiff5 from version 4.1.0+git191117-2ubuntu0.20.04.10 to 4.1.0+git191117-2ubuntu0.20.04.11
  • Updated linux-libc-dev from version 5.4.0-166.183 to 5.4.0-167.184
  • Updated perl from version 5.30.0-9ubuntu0.4 to 5.30.0-9ubuntu0.5
  • Updated perl-base from version 5.30.0-9ubuntu0.4 to 5.30.0-9ubuntu0.5
  • Updated perl-modules-5.30 from version 5.30.0-9ubuntu0.4 to 5.30.0-9ubuntu0.5
  • Updated poppler-utils from version 0.86.1-0ubuntu1.3 to 0.86.1-0ubuntu1.4
  • Updated postgresql-client-15 from version 15.4-2.pgdg20.04+1 to 15.5-1.pgdg20.04+1
  • Updated postgresql-client-common from version 255.pgdg20.04+1 to 256.pgdg20.04+1
  • Updated procps from version 2:3.3.16-1ubuntu2.3 to 2:3.3.16-1ubuntu2.4
  • Updated python3.8 from version 3.8.10-0ubuntu1~20.04.8 to 3.8.10-0ubuntu1~20.04.9
  • Updated python3.8-minimal from version 3.8.10-0ubuntu1~20.04.8 to 3.8.10-0ubuntu1~20.04.9

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libapt-pkg-dev from version 2.0.9 to 2.0.10
  • Updated libgnutls-dane0 from version 3.6.13-2ubuntu1.8 to 3.6.13-2ubuntu1.9
  • Updated libgnutls28-dev from version 3.6.13-2ubuntu1.8 to 3.6.13-2ubuntu1.9
  • Updated libgssrpc4 from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libkadm5clnt-mit11 from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libkadm5srv-mit11 from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libkdb5-9 from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libkrb5-dev from version 1.17-6ubuntu4.3 to 1.17-6ubuntu4.4
  • Updated libpq-dev from version 16.0-1.pgdg20.04+1 to 16.1-1.pgdg20.04+1
  • Updated libpython3.8 from version 3.8.10-0ubuntu1~20.04.8 to 3.8.10-0ubuntu1~20.04.9
  • Updated libpython3.8-dev from version 3.8.10-0ubuntu1~20.04.8 to 3.8.10-0ubuntu1~20.04.9
  • Updated libtiff-dev from version 4.1.0+git191117-2ubuntu0.20.04.10 to 4.1.0+git191117-2ubuntu0.20.04.11
  • Updated libtiffxx5 from version 4.1.0+git191117-2ubuntu0.20.04.10 to 4.1.0+git191117-2ubuntu0.20.04.11
  • Updated postgresql-common from version 255.pgdg20.04+1 to 256.pgdg20.04+1
  • Updated postgresql-server-dev-15 from version 15.4-2.pgdg20.04+1 to 15.5-1.pgdg20.04+1
  • Updated python3-urllib3 from version 1.25.8-2ubuntu0.2 to 1.25.8-2ubuntu0.3
  • Updated python3.8-dev from version 3.8.10-0ubuntu1~20.04.8 to 3.8.10-0ubuntu1~20.04.9

Stack: heroku-22

  • Updated apt from version 2.4.10 to 2.4.11
  • Updated apt-transport-https from version 2.4.10 to 2.4.11
  • Updated apt-utils from version 2.4.10 to 2.4.11
  • Updated libapparmor1 from version 3.0.4-2ubuntu2.2 to 3.0.4-2ubuntu2.3
  • Updated libapt-pkg6.0 from version 2.4.10 to 2.4.11
  • Updated libavahi-client3 from version 0.8-5ubuntu5.1 to 0.8-5ubuntu5.2
  • Updated libavahi-common-data from version 0.8-5ubuntu5.1 to 0.8-5ubuntu5.2
  • Updated libavahi-common3 from version 0.8-5ubuntu5.1 to 0.8-5ubuntu5.2
  • Updated libgnutls-openssl27 from version 3.7.3-4ubuntu1.2 to 3.7.3-4ubuntu1.3
  • Updated libgnutls30 from version 3.7.3-4ubuntu1.2 to 3.7.3-4ubuntu1.3
  • Updated libgnutlsxx28 from version 3.7.3-4ubuntu1.2 to 3.7.3-4ubuntu1.3
  • Updated libgssapi-krb5-2 from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libk5crypto3 from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libkrb5-3 from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libkrb5support0 from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libnghttp2-14 from version 1.43.0-1build3 to 1.43.0-1ubuntu0.1
  • Updated libperl5.34 from version 5.34.0-3ubuntu1.2 to 5.34.0-3ubuntu1.3
  • Updated libpoppler-glib8 from version 22.02.0-2ubuntu0.2 to 22.02.0-2ubuntu0.3
  • Updated libpoppler118 from version 22.02.0-2ubuntu0.2 to 22.02.0-2ubuntu0.3
  • Updated libpq5 from version 16.0-1.pgdg22.04+1 to 16.1-1.pgdg22.04+1
  • Updated libprocps8 from version 2:3.3.17-6ubuntu2 to 2:3.3.17-6ubuntu2.1
  • Updated libpython3.10-minimal from version 3.10.12-1~22.04.2 to 3.10.12-1~22.04.3
  • Updated libpython3.10-stdlib from version 3.10.12-1~22.04.2 to 3.10.12-1~22.04.3
  • Updated libtiff5 from version 4.3.0-6ubuntu0.6 to 4.3.0-6ubuntu0.7
  • Updated linux-libc-dev from version 5.15.0-88.98 to 5.15.0-89.99
  • Updated perl from version 5.34.0-3ubuntu1.2 to 5.34.0-3ubuntu1.3
  • Updated perl-base from version 5.34.0-3ubuntu1.2 to 5.34.0-3ubuntu1.3
  • Updated perl-modules-5.34 from version 5.34.0-3ubuntu1.2 to 5.34.0-3ubuntu1.3
  • Updated poppler-utils from version 22.02.0-2ubuntu0.2 to 22.02.0-2ubuntu0.3
  • Updated postgresql-client-15 from version 15.4-2.pgdg22.04+1 to 15.5-1.pgdg22.04+1
  • Updated postgresql-client-common from version 255.pgdg22.04+1 to 256.pgdg22.04+1
  • Updated procps from version 2:3.3.17-6ubuntu2 to 2:3.3.17-6ubuntu2.1
  • Updated python3.10 from version 3.10.12-1~22.04.2 to 3.10.12-1~22.04.3
  • Updated python3.10-minimal from version 3.10.12-1~22.04.2 to 3.10.12-1~22.04.3

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libapt-pkg-dev from version 2.4.10 to 2.4.11
  • Updated libgnutls-dane0 from version 3.7.3-4ubuntu1.2 to 3.7.3-4ubuntu1.3
  • Updated libgnutls28-dev from version 3.7.3-4ubuntu1.2 to 3.7.3-4ubuntu1.3
  • Updated libgssrpc4 from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libkadm5clnt-mit12 from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libkadm5srv-mit12 from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libkdb5-10 from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libkrb5-dev from version 1.19.2-2ubuntu0.2 to 1.19.2-2ubuntu0.3
  • Updated libpq-dev from version 16.0-1.pgdg22.04+1 to 16.1-1.pgdg22.04+1
  • Updated libpython3.10 from version 3.10.12-1~22.04.2 to 3.10.12-1~22.04.3
  • Updated libpython3.10-dev from version 3.10.12-1~22.04.2 to 3.10.12-1~22.04.3
  • Updated libtiff-dev from version 4.3.0-6ubuntu0.6 to 4.3.0-6ubuntu0.7
  • Updated libtiffxx5 from version 4.3.0-6ubuntu0.6 to 4.3.0-6ubuntu0.7
  • Updated python3-urllib3 from version 1.26.5-1~exp1 to 1.26.5-1~exp1ubuntu0.1
  • Updated python3.10-dev from version 3.10.12-1~22.04.2 to 3.10.12-1~22.04.3