Heroku-20, Heroku-22 and Heroku-24 stacks updated

Change effective on 03 September 2024

We have updated the heroku-20, heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent base image for the stack each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

The Heroku-20 stack is deprecated and will reach end-of-life on April 30th, 2025. Please upgrade to a newer stack as soon as possible. See the Heroku-20 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-20

  • Updated libgssapi-krb5-2 from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated libk5crypto3 from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated libkrb5-3 from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated libkrb5support0 from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated liborc-0.4-0 from version 1:0.4.31-1 to 1:0.4.31-1ubuntu0.1
  • Updated linux-libc-dev from version 5.4.0-192.212 to 5.4.0-193.213

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated libgssrpc4 from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated libkadm5clnt-mit11 from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated libkadm5srv-mit11 from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated libkdb5-9 from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7
  • Updated libkrb5-dev from version 1.17-6ubuntu4.6 to 1.17-6ubuntu4.7

Stack: heroku-22

  • Updated e2fsprogs from version 1.46.5-2ubuntu1.1 to 1.46.5-2ubuntu1.2
  • Updated libcom-err2 from version 1.46.5-2ubuntu1.1 to 1.46.5-2ubuntu1.2
  • Updated libext2fs2 from version 1.46.5-2ubuntu1.1 to 1.46.5-2ubuntu1.2
  • Updated liborc-0.4-0 from version 1:0.4.32-2 to 1:0.4.32-2ubuntu0.1
  • Updated libpython3-stdlib from version 3.10.6-1~22.04 to 3.10.6-1~22.04.1
  • Updated libss2 from version 1.46.5-2ubuntu1.1 to 1.46.5-2ubuntu1.2
  • Updated linux-libc-dev from version 5.15.0-118.128 to 5.15.0-119.129
  • Updated logsave from version 1.46.5-2ubuntu1.1 to 1.46.5-2ubuntu1.2
  • Updated python3 from version 3.10.6-1~22.04 to 3.10.6-1~22.04.1
  • Updated python3-minimal from version 3.10.6-1~22.04 to 3.10.6-1~22.04.1

Updates to packages available at build time only

  • Updated comerr-dev from version 2.1-1.46.5-2ubuntu1.1 to 2.1-1.46.5-2ubuntu1.2
  • Updated libpython3-dev from version 3.10.6-1~22.04 to 3.10.6-1~22.04.1
  • Updated python3-dev from version 3.10.6-1~22.04 to 3.10.6-1~22.04.1

Stack: heroku-24

  • Updated base-files from version 13ubuntu10 to 13ubuntu10.1
  • Updated bsdutils from version 1:2.39.3-9ubuntu6 to 1:2.39.3-9ubuntu6.1
  • Updated bzip2 from version 1.0.8-5.1 to 1.0.8-5.1build0.1
  • Updated curl from version 8.5.0-2ubuntu10.2 to 8.5.0-2ubuntu10.3
  • Updated dpkg from version 1.22.6ubuntu6 to 1.22.6ubuntu6.1
  • Updated e2fsprogs from version 1.47.0-2.4~exp1ubuntu4 to 1.47.0-2.4~exp1ubuntu4.1
  • Updated libblkid1 from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated libbz2-1.0 from version 1.0.8-5.1 to 1.0.8-5.1build0.1
  • Updated libc-bin from version 2.39-0ubuntu8.2 to 2.39-0ubuntu8.3
  • Updated libc6 from version 2.39-0ubuntu8.2 to 2.39-0ubuntu8.3
  • Updated libcom-err2 from version 1.47.0-2.4~exp1ubuntu4 to 1.47.0-2.4~exp1ubuntu4.1
  • Updated libcurl3t64-gnutls from version 8.5.0-2ubuntu10.2 to 8.5.0-2ubuntu10.3
  • Updated libcurl4t64 from version 8.5.0-2ubuntu10.2 to 8.5.0-2ubuntu10.3
  • Updated libdeflate0 from version 1.19-1build1 to 1.19-1build1.1
  • Updated libext2fs2t64 from version 1.47.0-2.4~exp1ubuntu4 to 1.47.0-2.4~exp1ubuntu4.1
  • Updated libgnutls-openssl27t64 from version 3.8.3-1.1ubuntu3.1 to 3.8.3-1.1ubuntu3.2
  • Updated libgnutls30t64 from version 3.8.3-1.1ubuntu3.1 to 3.8.3-1.1ubuntu3.2
  • Updated libhogweed6t64 from version 3.9.1-2.2build1 to 3.9.1-2.2build1.1
  • Updated libicu74 from version 74.2-1ubuntu3 to 74.2-1ubuntu3.1
  • Updated liblz4-1 from version 1.9.4-1build1 to 1.9.4-1build1.1
  • Updated liblzma5 from version 5.6.1+really5.4.5-1 to 5.6.1+really5.4.5-1build0.1
  • Updated libmount1 from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated libmysqlclient21 from version 8.0.39-0ubuntu0.24.04.1 to 8.0.39-0ubuntu0.24.04.2
  • Updated libnettle8t64 from version 3.9.1-2.2build1 to 3.9.1-2.2build1.1
  • Updated libp11-kit0 from version 0.25.3-4ubuntu2 to 0.25.3-4ubuntu2.1
  • Updated libsasl2-2 from version 2.1.28+dfsg1-5ubuntu3 to 2.1.28+dfsg1-5ubuntu3.1
  • Updated libsasl2-modules from version 2.1.28+dfsg1-5ubuntu3 to 2.1.28+dfsg1-5ubuntu3.1
  • Updated libsasl2-modules-db from version 2.1.28+dfsg1-5ubuntu3 to 2.1.28+dfsg1-5ubuntu3.1
  • Updated libseccomp2 from version 2.5.5-1ubuntu3 to 2.5.5-1ubuntu3.1
  • Updated libsmartcols1 from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated libss2 from version 1.47.0-2.4~exp1ubuntu4 to 1.47.0-2.4~exp1ubuntu4.1
  • Updated libssl3t64 from version 3.0.13-0ubuntu3.2 to 3.0.13-0ubuntu3.3
  • Updated libsystemd0 from version 255.4-1ubuntu8.2 to 255.4-1ubuntu8.4
  • Updated libudev1 from version 255.4-1ubuntu8.2 to 255.4-1ubuntu8.4
  • Updated libuuid1 from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated libzstd1 from version 1.5.5+dfsg2-2build1 to 1.5.5+dfsg2-2build1.1
  • Updated locales from version 2.39-0ubuntu8.2 to 2.39-0ubuntu8.3
  • Updated logsave from version 1.47.0-2.4~exp1ubuntu4 to 1.47.0-2.4~exp1ubuntu4.1
  • Updated mount from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated openssh-client from version 1:9.6p1-3ubuntu13.4 to 1:9.6p1-3ubuntu13.5
  • Updated openssh-server from version 1:9.6p1-3ubuntu13.4 to 1:9.6p1-3ubuntu13.5
  • Updated openssh-sftp-server from version 1:9.6p1-3ubuntu13.4 to 1:9.6p1-3ubuntu13.5
  • Updated openssl from version 3.0.13-0ubuntu3.2 to 3.0.13-0ubuntu3.3
  • Updated util-linux from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated xz-utils from version 5.6.1+really5.4.5-1 to 5.6.1+really5.4.5-1build0.1
  • Updated zlib1g from version 1:1.3.dfsg-3.1ubuntu2 to 1:1.3.dfsg-3.1ubuntu2.1
  • Updated zstd from version 1.5.5+dfsg2-2build1 to 1.5.5+dfsg2-2build1.1
  • Added fonts-urw-base35 version 20200910-8
  • Added libfontenc1 version 1:1.1.8-1build1
  • Added x11-common version 1:7.7+23ubuntu3
  • Added xfonts-encodings version 1:1.0.5-0ubuntu2
  • Added xfonts-utils version 1:7.7+6build3

Updates to packages available at build time only

  • Updated comerr-dev from version 2.1-1.47.0-2.4~exp1ubuntu4 to 2.1-1.47.0-2.4~exp1ubuntu4.1
  • Updated dpkg-dev from version 1.22.6ubuntu6 to 1.22.6ubuntu6.1
  • Updated icu-devtools from version 74.2-1ubuntu3 to 74.2-1ubuntu3.1
  • Updated libblkid-dev from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated libbz2-dev from version 1.0.8-5.1 to 1.0.8-5.1build0.1
  • Updated libc-dev-bin from version 2.39-0ubuntu8.2 to 2.39-0ubuntu8.3
  • Updated libc6-dev from version 2.39-0ubuntu8.2 to 2.39-0ubuntu8.3
  • Updated libcurl4-openssl-dev from version 8.5.0-2ubuntu10.2 to 8.5.0-2ubuntu10.3
  • Updated libdeflate-dev from version 1.19-1build1 to 1.19-1build1.1
  • Updated libdpkg-perl from version 1.22.6ubuntu6 to 1.22.6ubuntu6.1
  • Updated libgnutls-dane0t64 from version 3.8.3-1.1ubuntu3.1 to 3.8.3-1.1ubuntu3.2
  • Updated libgnutls28-dev from version 3.8.3-1.1ubuntu3.1 to 3.8.3-1.1ubuntu3.2
  • Updated libicu-dev from version 74.2-1ubuntu3 to 74.2-1ubuntu3.1
  • Updated liblz4-dev from version 1.9.4-1build1 to 1.9.4-1build1.1
  • Updated liblzma-dev from version 5.6.1+really5.4.5-1 to 5.6.1+really5.4.5-1build0.1
  • Updated libmount-dev from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated libmysqlclient-dev from version 8.0.39-0ubuntu0.24.04.1 to 8.0.39-0ubuntu0.24.04.2
  • Updated libp11-kit-dev from version 0.25.3-4ubuntu2 to 0.25.3-4ubuntu2.1
  • Updated libpython3-stdlib from version 3.12.3-0ubuntu1 to 3.12.3-0ubuntu2
  • Updated libsasl2-dev from version 2.1.28+dfsg1-5ubuntu3 to 2.1.28+dfsg1-5ubuntu3.1
  • Updated libssl-dev from version 3.0.13-0ubuntu3.2 to 3.0.13-0ubuntu3.3
  • Updated libzstd-dev from version 1.5.5+dfsg2-2build1 to 1.5.5+dfsg2-2build1.1
  • Updated linux-libc-dev from version 6.8.0-40.40 to 6.8.0-41.41
  • Updated nettle-dev from version 3.9.1-2.2build1 to 3.9.1-2.2build1.1
  • Updated python3 from version 3.12.3-0ubuntu1 to 3.12.3-0ubuntu2
  • Updated python3-minimal from version 3.12.3-0ubuntu1 to 3.12.3-0ubuntu2
  • Updated uuid-dev from version 2.39.3-9ubuntu6 to 2.39.3-9ubuntu6.1
  • Updated zlib1g-dev from version 1:1.3.dfsg-3.1ubuntu2 to 1:1.3.dfsg-3.1ubuntu2.1