Heroku-20 and Heroku-22 stacks updated

Change effective on 11 March 2024

We have updated the heroku-20 and heroku-22 stacks to pick up security fixes in upstream packages. The new base images for each stack will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent base image for the stack each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-20

  • Updated bind9-dnsutils from version 1:9.16.1-0ubuntu2.16 to 1:9.16.48-0ubuntu0.20.04.1
  • Updated bind9-host from version 1:9.16.1-0ubuntu2.16 to 1:9.16.48-0ubuntu0.20.04.1
  • Updated bind9-libs from version 1:9.16.1-0ubuntu2.16 to 1:9.16.48-0ubuntu0.20.04.1
  • Updated binutils from version 2.34-6ubuntu1.8 to 2.34-6ubuntu1.9
  • Updated binutils-common from version 2.34-6ubuntu1.8 to 2.34-6ubuntu1.9
  • Updated binutils-x86-64-linux-gnu from version 2.34-6ubuntu1.8 to 2.34-6ubuntu1.9
  • Updated dnsutils from version 1:9.16.1-0ubuntu2.16 to 1:9.16.48-0ubuntu0.20.04.1
  • Updated less from version 551-1ubuntu0.1 to 551-1ubuntu0.2
  • Updated libbinutils from version 2.34-6ubuntu1.8 to 2.34-6ubuntu1.9
  • Updated libctf-nobfd0 from version 2.34-6ubuntu1.8 to 2.34-6ubuntu1.9
  • Updated libctf0 from version 2.34-6ubuntu1.8 to 2.34-6ubuntu1.9
  • Updated libssl1.1 from version 1.1.1f-1ubuntu2.21 to 1.1.1f-1ubuntu2.22
  • Updated libtiff5 from version 4.1.0+git191117-2ubuntu0.20.04.11 to 4.1.0+git191117-2ubuntu0.20.04.12
  • Updated libuv1 from version 1.34.2-1ubuntu1.3 to 1.34.2-1ubuntu1.5
  • Updated libxml2 from version 2.9.10+dfsg-5ubuntu0.20.04.6 to 2.9.10+dfsg-5ubuntu0.20.04.7
  • Updated linux-libc-dev from version 5.4.0-171.189 to 5.4.0-173.191
  • Updated openssl from version 1.1.1f-1ubuntu2.21 to 1.1.1f-1ubuntu2.22
  • Updated tzdata from version 2023d-0ubuntu0.20.04 to 2024a-0ubuntu0.20.04

Updates to packages available at build time only

  • Updated libssl-dev from version 1.1.1f-1ubuntu2.21 to 1.1.1f-1ubuntu2.22
  • Updated libtiff-dev from version 4.1.0+git191117-2ubuntu0.20.04.11 to 4.1.0+git191117-2ubuntu0.20.04.12
  • Updated libtiffxx5 from version 4.1.0+git191117-2ubuntu0.20.04.11 to 4.1.0+git191117-2ubuntu0.20.04.12
  • Updated libunbound8 from version 1.9.4-2ubuntu1.4 to 1.9.4-2ubuntu1.5
  • Updated libuv1-dev from version 1.34.2-1ubuntu1.3 to 1.34.2-1ubuntu1.5
  • Updated libxml2-dev from version 2.9.10+dfsg-5ubuntu0.20.04.6 to 2.9.10+dfsg-5ubuntu0.20.04.7

Stack: heroku-22

  • Updated binutils from version 2.38-4ubuntu2.5 to 2.38-4ubuntu2.6
  • Updated binutils-common from version 2.38-4ubuntu2.5 to 2.38-4ubuntu2.6
  • Updated binutils-x86-64-linux-gnu from version 2.38-4ubuntu2.5 to 2.38-4ubuntu2.6
  • Updated dpkg from version 1.21.1ubuntu2.2 to 1.21.1ubuntu2.3
  • Updated less from version 590-1ubuntu0.22.04.1 to 590-1ubuntu0.22.04.2
  • Updated libbinutils from version 2.38-4ubuntu2.5 to 2.38-4ubuntu2.6
  • Updated libctf-nobfd0 from version 2.38-4ubuntu2.5 to 2.38-4ubuntu2.6
  • Updated libctf0 from version 2.38-4ubuntu2.5 to 2.38-4ubuntu2.6
  • Updated libcups2 from version 2.4.1op1-1ubuntu4.7 to 2.4.1op1-1ubuntu4.8
  • Updated libde265-0 from version 1.0.8-1ubuntu0.1 to 1.0.8-1ubuntu0.3
  • Updated libssl3 from version 3.0.2-0ubuntu1.14 to 3.0.2-0ubuntu1.15
  • Updated libtiff5 from version 4.3.0-6ubuntu0.7 to 4.3.0-6ubuntu0.8
  • Updated libuv1 from version 1.43.0-1 to 1.43.0-1ubuntu0.1
  • Updated libxml2 from version 2.9.13+dfsg-1ubuntu0.3 to 2.9.13+dfsg-1ubuntu0.4
  • Updated linux-libc-dev from version 5.15.0-94.104 to 5.15.0-100.110
  • Updated openssl from version 3.0.2-0ubuntu1.14 to 3.0.2-0ubuntu1.15
  • Updated tzdata from version 2023d-0ubuntu0.22.04 to 2024a-0ubuntu0.22.04

Updates to packages available at build time only

  • Updated cmake from version 3.22.1-1ubuntu1.22.04.1 to 3.22.1-1ubuntu1.22.04.2
  • Updated cmake-data from version 3.22.1-1ubuntu1.22.04.1 to 3.22.1-1ubuntu1.22.04.2
  • Updated dpkg-dev from version 1.21.1ubuntu2.2 to 1.21.1ubuntu2.3
  • Updated libde265-dev from version 1.0.8-1ubuntu0.1 to 1.0.8-1ubuntu0.3
  • Updated libdpkg-perl from version 1.21.1ubuntu2.2 to 1.21.1ubuntu2.3
  • Updated libssl-dev from version 3.0.2-0ubuntu1.14 to 3.0.2-0ubuntu1.15
  • Updated libtiff-dev from version 4.3.0-6ubuntu0.7 to 4.3.0-6ubuntu0.8
  • Updated libtiffxx5 from version 4.3.0-6ubuntu0.7 to 4.3.0-6ubuntu0.8
  • Updated libunbound8 from version 1.13.1-1ubuntu5.3 to 1.13.1-1ubuntu5.4
  • Updated libuv1-dev from version 1.43.0-1 to 1.43.0-1ubuntu0.1
  • Updated libxml2-dev from version 2.9.13+dfsg-1ubuntu0.3 to 2.9.13+dfsg-1ubuntu0.4