Heroku-20 and Heroku-22 stacks updated

Change effective on 24 January 2024

We have updated the heroku-20 and heroku-22 stacks to pick up security fixes in upstream packages. The new base images for each stack will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent base image for the stack each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-20

• Updated base-files from version 11ubuntu5.7 to 11ubuntu5.8
• Updated binutils from version 2.34-6ubuntu1.7 to 2.34-6ubuntu1.8
• Updated binutils-common from version 2.34-6ubuntu1.7 to 2.34-6ubuntu1.8
• Updated binutils-x86-64-linux-gnu from version 2.34-6ubuntu1.7 to 2.34-6ubuntu1.8
• Updated iputils-tracepath from version 3:20190709-3 to 3:20190709-3ubuntu1
• Updated libbinutils from version 2.34-6ubuntu1.7 to 2.34-6ubuntu1.8
• Updated libctf-nobfd0 from version 2.34-6ubuntu1.7 to 2.34-6ubuntu1.8
• Updated libctf0 from version 2.34-6ubuntu1.7 to 2.34-6ubuntu1.8
• Updated libgnutls-openssl27 from version 3.6.13-2ubuntu1.9 to 3.6.13-2ubuntu1.10
• Updated libgnutls30 from version 3.6.13-2ubuntu1.9 to 3.6.13-2ubuntu1.10
• Updated libgnutlsxx28 from version 3.6.13-2ubuntu1.9 to 3.6.13-2ubuntu1.10
• Updated libpam-modules from version 1.3.1-5ubuntu4.6 to 1.3.1-5ubuntu4.7
• Updated libpam-modules-bin from version 1.3.1-5ubuntu4.6 to 1.3.1-5ubuntu4.7
• Updated libpam-runtime from version 1.3.1-5ubuntu4.6 to 1.3.1-5ubuntu4.7
• Updated libpam0g from version 1.3.1-5ubuntu4.6 to 1.3.1-5ubuntu4.7
• Updated libsqlite3-0 from version 3.31.1-4ubuntu0.5 to 3.31.1-4ubuntu0.6
• Updated libssh-4 from version 0.9.3-2ubuntu2.4 to 0.9.3-2ubuntu2.5
• Updated libsystemd0 from version 245.4-4ubuntu3.22 to 245.4-4ubuntu3.23
• Updated libudev1 from version 245.4-4ubuntu3.22 to 245.4-4ubuntu3.23
• Updated openssh-client from version 1:8.2p1-4ubuntu0.10 to 1:8.2p1-4ubuntu0.11
• Updated openssh-server from version 1:8.2p1-4ubuntu0.10 to 1:8.2p1-4ubuntu0.11
• Updated openssh-sftp-server from version 1:8.2p1-4ubuntu0.10 to 1:8.2p1-4ubuntu0.11
• Updated tzdata from version 2023c-0ubuntu0.20.04.2 to 2023d-0ubuntu0.20.04

Updates to packages available at build time only

• Updated libgnutls-dane0 from version 3.6.13-2ubuntu1.9 to 3.6.13-2ubuntu1.10
• Updated libgnutls28-dev from version 3.6.13-2ubuntu1.9 to 3.6.13-2ubuntu1.10
• Updated libpam0g-dev from version 1.3.1-5ubuntu4.6 to 1.3.1-5ubuntu4.7
• Updated libsystemd-dev from version 245.4-4ubuntu3.22 to 245.4-4ubuntu3.23
• Updated libudev-dev from version 245.4-4ubuntu3.22 to 245.4-4ubuntu3.23

Stack: heroku-22

• Updated base-files from version 12ubuntu4.4 to 12ubuntu4.5
• Updated binutils from version 2.38-4ubuntu2.4 to 2.38-4ubuntu2.5
• Updated binutils-common from version 2.38-4ubuntu2.4 to 2.38-4ubuntu2.5
• Updated binutils-x86-64-linux-gnu from version 2.38-4ubuntu2.4 to 2.38-4ubuntu2.5
• Updated libbinutils from version 2.38-4ubuntu2.4 to 2.38-4ubuntu2.5
• Updated libc-bin from version 2.35-0ubuntu3.5 to 2.35-0ubuntu3.6
• Updated libc-dev-bin from version 2.35-0ubuntu3.5 to 2.35-0ubuntu3.6
• Updated libc6 from version 2.35-0ubuntu3.5 to 2.35-0ubuntu3.6
• Updated libc6-dev from version 2.35-0ubuntu3.5 to 2.35-0ubuntu3.6
• Updated libctf-nobfd0 from version 2.38-4ubuntu2.4 to 2.38-4ubuntu2.5
• Updated libctf0 from version 2.38-4ubuntu2.4 to 2.38-4ubuntu2.5
• Updated libgnutls-openssl27 from version 3.7.3-4ubuntu1.3 to 3.7.3-4ubuntu1.4
• Updated libgnutls30 from version 3.7.3-4ubuntu1.3 to 3.7.3-4ubuntu1.4
• Updated libgnutlsxx28 from version 3.7.3-4ubuntu1.3 to 3.7.3-4ubuntu1.4
• Updated libpam-modules from version 1.4.0-11ubuntu2.3 to 1.4.0-11ubuntu2.4
• Updated libpam-modules-bin from version 1.4.0-11ubuntu2.3 to 1.4.0-11ubuntu2.4
• Updated libpam-runtime from version 1.4.0-11ubuntu2.3 to 1.4.0-11ubuntu2.4
• Updated libpam0g from version 1.4.0-11ubuntu2.3 to 1.4.0-11ubuntu2.4
• Updated libsqlite3-0 from version 3.37.2-2ubuntu0.1 to 3.37.2-2ubuntu0.3
• Updated libssh-4 from version 0.9.6-2ubuntu0.22.04.2 to 0.9.6-2ubuntu0.22.04.3
• Updated libsystemd0 from version 249.11-0ubuntu3.11 to 249.11-0ubuntu3.12
• Updated libudev1 from version 249.11-0ubuntu3.11 to 249.11-0ubuntu3.12
• Updated locales from version 2.35-0ubuntu3.5 to 2.35-0ubuntu3.6
• Updated openssh-client from version 1:8.9p1-3ubuntu0.5 to 1:8.9p1-3ubuntu0.6
• Updated openssh-server from version 1:8.9p1-3ubuntu0.5 to 1:8.9p1-3ubuntu0.6
• Updated openssh-sftp-server from version 1:8.9p1-3ubuntu0.5 to 1:8.9p1-3ubuntu0.6
• Updated systemd from version 249.11-0ubuntu3.11 to 249.11-0ubuntu3.12
• Updated tzdata from version 2023c-0ubuntu0.22.04.2 to 2023d-0ubuntu0.22.04

Updates to packages available at build time only

• Updated libgnutls-dane0 from version 3.7.3-4ubuntu1.3 to 3.7.3-4ubuntu1.4
• Updated libgnutls28-dev from version 3.7.3-4ubuntu1.3 to 3.7.3-4ubuntu1.4
• Updated libpam0g-dev from version 1.4.0-11ubuntu2.3 to 1.4.0-11ubuntu2.4
• Updated libsystemd-dev from version 249.11-0ubuntu3.11 to 249.11-0ubuntu3.12
• Updated libudev-dev from version 249.11-0ubuntu3.11 to 249.11-0ubuntu3.12