Heroku-20 and Heroku-22 stacks updated

Change effective on 19 February 2024

We have updated the heroku-20 and heroku-22 stacks to pick up security fixes in upstream packages. The new base images for each stack will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent base image for the stack each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-20

  • Updated libpq5 from version 16.1-1.pgdg20.04+1 to 16.2-1.pgdg20.04+1
  • Updated linux-libc-dev from version 5.4.0-170.188 to 5.4.0-171.189
  • Updated login from version 1:4.8.1-1ubuntu5.20.04.4 to 1:4.8.1-1ubuntu5.20.04.5
  • Updated passwd from version 1:4.8.1-1ubuntu5.20.04.4 to 1:4.8.1-1ubuntu5.20.04.5
  • Updated postgresql-client-15 from version 15.5-1.pgdg20.04+1 to 15.6-1.pgdg20.04+1
  • Updated postgresql-client-common from version 256.pgdg20.04+1 to 257.pgdg20.04+1
  • Updated unzip from version 6.0-25ubuntu1.1 to 6.0-25ubuntu1.2

Updates to packages available at build time only

  • Updated libpq-dev from version 16.1-1.pgdg20.04+1 to 16.2-1.pgdg20.04+1
  • Updated postgresql-common from version 256.pgdg20.04+1 to 257.pgdg20.04+1
  • Updated postgresql-server-dev-15 from version 15.5-1.pgdg20.04+1 to 15.6-1.pgdg20.04+1

Stack: heroku-22

  • Updated base-files from version 12ubuntu4.5 to 12ubuntu4.6
  • Updated bind9-dnsutils from version 1:9.18.18-0ubuntu0.22.04.1 to 1:9.18.18-0ubuntu0.22.04.2
  • Updated bind9-host from version 1:9.18.18-0ubuntu0.22.04.1 to 1:9.18.18-0ubuntu0.22.04.2
  • Updated bind9-libs from version 1:9.18.18-0ubuntu0.22.04.1 to 1:9.18.18-0ubuntu0.22.04.2
  • Updated coreutils from version 8.32-4.1ubuntu1 to 8.32-4.1ubuntu1.1
  • Updated dnsutils from version 1:9.18.18-0ubuntu0.22.04.1 to 1:9.18.18-0ubuntu0.22.04.2
  • Updated language-pack-en from version 1:22.04+20230801 to 1:22.04+20240212
  • Updated language-pack-en-base from version 1:22.04+20230801 to 1:22.04+20240212
  • Updated libde265-0 from version 1.0.8-1 to 1.0.8-1ubuntu0.1
  • Updated libip4tc2 from version 1.8.7-1ubuntu5.1 to 1.8.7-1ubuntu5.2
  • Updated libpq5 from version 16.1-1.pgdg22.04+1 to 16.2-1.pgdg22.04+1
  • Updated libxtables12 from version 1.8.7-1ubuntu5.1 to 1.8.7-1ubuntu5.2
  • Updated linux-libc-dev from version 5.15.0-92.102 to 5.15.0-94.104
  • Updated login from version 1:4.8.1-2ubuntu2.1 to 1:4.8.1-2ubuntu2.2
  • Updated passwd from version 1:4.8.1-2ubuntu2.1 to 1:4.8.1-2ubuntu2.2
  • Updated postgresql-client-15 from version 15.5-1.pgdg22.04+1 to 15.6-1.pgdg22.04+1
  • Updated postgresql-client-common from version 256.pgdg22.04+1 to 257.pgdg22.04+1
  • Updated unzip from version 6.0-26ubuntu3.1 to 6.0-26ubuntu3.2

Updates to packages available at build time only

  • Updated libde265-dev from version 1.0.8-1 to 1.0.8-1ubuntu0.1
  • Updated libpq-dev from version 16.1-1.pgdg22.04+1 to 16.2-1.pgdg22.04+1