Heroku-20, Heroku-22 and Heroku-24 stacks updated

Change effective on 24 September 2024

We have updated the heroku-20, heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

This update also adds ghostscript (and several related packages) to heroku-24.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes, since your application’s slug is applied on top of the most recent base image for the stack each time a dyno starts. Currently running dynos will be automatically restarted, so there is no need to manually restart your app.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-20

• Updated curl from version 7.68.0-1ubuntu2.23 to 7.68.0-1ubuntu2.24
• Updated libcurl3-gnutls from version 7.68.0-1ubuntu2.23 to 7.68.0-1ubuntu2.24
• Updated libcurl4 from version 7.68.0-1ubuntu2.23 to 7.68.0-1ubuntu2.24
• Updated libexpat1 from version 2.2.9-1ubuntu0.6 to 2.2.9-1ubuntu0.7
• Updated libpython3.8-minimal from version 3.8.10-0ubuntu1~20.04.11 to 3.8.10-0ubuntu1~20.04.12
• Updated libpython3.8-stdlib from version 3.8.10-0ubuntu1~20.04.11 to 3.8.10-0ubuntu1~20.04.12
• Updated libsystemd0 from version 245.4-4ubuntu3.23 to 245.4-4ubuntu3.24
• Updated libtiff5 from version 4.1.0+git191117-2ubuntu0.20.04.13 to 4.1.0+git191117-2ubuntu0.20.04.14
• Updated libudev1 from version 245.4-4ubuntu3.23 to 245.4-4ubuntu3.24
• Updated linux-libc-dev from version 5.4.0-193.213 to 5.4.0-196.216
• Updated python3.8 from version 3.8.10-0ubuntu1~20.04.11 to 3.8.10-0ubuntu1~20.04.12
• Updated python3.8-minimal from version 3.8.10-0ubuntu1~20.04.11 to 3.8.10-0ubuntu1~20.04.12

Updates to packages available at build time only

• Updated libcurl4-openssl-dev from version 7.68.0-1ubuntu2.23 to 7.68.0-1ubuntu2.24
• Updated libexpat1-dev from version 2.2.9-1ubuntu0.6 to 2.2.9-1ubuntu0.7
• Updated libpython3.8 from version 3.8.10-0ubuntu1~20.04.11 to 3.8.10-0ubuntu1~20.04.12
• Updated libpython3.8-dev from version 3.8.10-0ubuntu1~20.04.11 to 3.8.10-0ubuntu1~20.04.12
• Updated libsystemd-dev from version 245.4-4ubuntu3.23 to 245.4-4ubuntu3.24
• Updated libtiff-dev from version 4.1.0+git191117-2ubuntu0.20.04.13 to 4.1.0+git191117-2ubuntu0.20.04.14
• Updated libtiffxx5 from version 4.1.0+git191117-2ubuntu0.20.04.13 to 4.1.0+git191117-2ubuntu0.20.04.14
• Updated libudev-dev from version 245.4-4ubuntu3.23 to 245.4-4ubuntu3.24
• Updated libunbound8 from version 1.9.4-2ubuntu1.6 to 1.9.4-2ubuntu1.8
• Updated python3.8-dev from version 3.8.10-0ubuntu1~20.04.11 to 3.8.10-0ubuntu1~20.04.12

Stack: heroku-22

• Updated apt from version 2.4.12 to 2.4.13
• Updated apt-transport-https from version 2.4.12 to 2.4.13
• Updated apt-utils from version 2.4.12 to 2.4.13
• Updated base-files from version 12ubuntu4.6 to 12ubuntu4.7
• Updated curl from version 7.81.0-1ubuntu1.17 to 7.81.0-1ubuntu1.18
• Updated language-pack-en from version 1:22.04+20240212 to 1:22.04+20240902
• Updated language-pack-en-base from version 1:22.04+20240212 to 1:22.04+20240902
• Updated libapparmor1 from version 3.0.4-2ubuntu2.3 to 3.0.4-2ubuntu2.4
• Updated libapt-pkg6.0 from version 2.4.12 to 2.4.13
• Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.17 to 7.81.0-1ubuntu1.18
• Updated libcurl4 from version 7.81.0-1ubuntu1.17 to 7.81.0-1ubuntu1.18
• Updated libexpat1 from version 2.4.7-1ubuntu0.3 to 2.4.7-1ubuntu0.4
• Updated libpython3.10-minimal from version 3.10.12-1~22.04.5 to 3.10.12-1~22.04.6
• Updated libpython3.10-stdlib from version 3.10.12-1~22.04.5 to 3.10.12-1~22.04.6
• Updated libssl3 from version 3.0.2-0ubuntu1.17 to 3.0.2-0ubuntu1.18
• Updated libtiff5 from version 4.3.0-6ubuntu0.9 to 4.3.0-6ubuntu0.10
• Updated linux-libc-dev from version 5.15.0-119.129 to 5.15.0-122.132
• Updated openssl from version 3.0.2-0ubuntu1.17 to 3.0.2-0ubuntu1.18
• Updated python3.10 from version 3.10.12-1~22.04.5 to 3.10.12-1~22.04.6
• Updated python3.10-minimal from version 3.10.12-1~22.04.5 to 3.10.12-1~22.04.6
• Added libhashkit2 version 1.0.18-4.2ubuntu4
• Added libmemcachedutil2 version 1.0.18-4.2ubuntu4
• Added libnetpbm10 version 2:10.0-15.4
• Added libwmf-0.2-7 version 0.2.12-5ubuntu1

Updates to packages available at build time only

• Updated libapt-pkg-dev from version 2.4.12 to 2.4.13
• Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.17 to 7.81.0-1ubuntu1.18
• Updated libexpat1-dev from version 2.4.7-1ubuntu0.3 to 2.4.7-1ubuntu0.4
• Updated libpython3.10 from version 3.10.12-1~22.04.5 to 3.10.12-1~22.04.6
• Updated libpython3.10-dev from version 3.10.12-1~22.04.5 to 3.10.12-1~22.04.6
• Updated libssl-dev from version 3.0.2-0ubuntu1.17 to 3.0.2-0ubuntu1.18
• Updated libtiff-dev from version 4.3.0-6ubuntu0.9 to 4.3.0-6ubuntu0.10
• Updated libtiffxx5 from version 4.3.0-6ubuntu0.9 to 4.3.0-6ubuntu0.10
• Updated libunbound8 from version 1.13.1-1ubuntu5.5 to 1.13.1-1ubuntu5.7
• Updated python3.10-dev from version 3.10.12-1~22.04.5 to 3.10.12-1~22.04.6

Stack: heroku-24

• Updated curl from version 8.5.0-2ubuntu10.3 to 8.5.0-2ubuntu10.4
• Updated libcurl3t64-gnutls from version 8.5.0-2ubuntu10.3 to 8.5.0-2ubuntu10.4
• Updated libcurl4t64 from version 8.5.0-2ubuntu10.3 to 8.5.0-2ubuntu10.4
• Updated libexpat1 from version 2.6.1-2build1 to 2.6.1-2ubuntu0.1
• Updated libproc2-0 from version 2:4.0.4-4ubuntu3 to 2:4.0.4-4ubuntu3.1
• Updated libssl3t64 from version 3.0.13-0ubuntu3.3 to 3.0.13-0ubuntu3.4
• Updated libtiff6 from version 4.5.1+git230720-4ubuntu2.1 to 4.5.1+git230720-4ubuntu2.2
• Updated openssl from version 3.0.13-0ubuntu3.3 to 3.0.13-0ubuntu3.4
• Updated procps from version 2:4.0.4-4ubuntu3 to 2:4.0.4-4ubuntu3.1
• Added ghostscript version 10.02.1~dfsg1-0ubuntu7.3
• Added libavahi-client3 version 0.8-13ubuntu6
• Added libavahi-common-data version 0.8-13ubuntu6
• Added libavahi-common3 version 0.8-13ubuntu6
• Added libcups2t64 version 2.4.7-1.2ubuntu7.2
• Added libdbus-1-3 version 1.14.10-4ubuntu4.1
• Added libgs-common version 10.02.1~dfsg1-0ubuntu7.3
• Added libgs10 version 10.02.1~dfsg1-0ubuntu7.3
• Added libgs10-common version 10.02.1~dfsg1-0ubuntu7.3
• Added libice6 version 2:1.0.10-1build3
• Added libidn12 version 1.42-1build1
• Added libijs-0.35 version 0.35-15.1build1
• Added libjbig2dec0 version 0.20-1build3
• Added libmemcachedutil2t64 version 1.1.4-1.1build3
• Added libpaper1 version 1.1.29build1
• Added libsm6 version 2:1.2.3-1build3
• Added libwebpdecoder3 version 1.3.2-0.4build3
• Added libwmf-0.2-7 version 0.2.13-1.1build3
• Added libxt6t64 version 1:1.2.1-1.2build1
• Added poppler-data version 0.4.12-1

Updates to packages available at build time only

• Updated libcurl4-openssl-dev from version 8.5.0-2ubuntu10.3 to 8.5.0-2ubuntu10.4
• Updated libexpat1-dev from version 2.6.1-2build1 to 2.6.1-2ubuntu0.1
• Updated libpython3.12-minimal from version 3.12.3-1ubuntu0.1 to 3.12.3-1ubuntu0.2
• Updated libpython3.12-stdlib from version 3.12.3-1ubuntu0.1 to 3.12.3-1ubuntu0.2
• Updated libssl-dev from version 3.0.13-0ubuntu3.3 to 3.0.13-0ubuntu3.4
• Updated libtiff-dev from version 4.5.1+git230720-4ubuntu2.1 to 4.5.1+git230720-4ubuntu2.2
• Updated libtiffxx6 from version 4.5.1+git230720-4ubuntu2.1 to 4.5.1+git230720-4ubuntu2.2
• Updated libunbound8 from version 1.19.2-1ubuntu3.1 to 1.19.2-1ubuntu3.2
• Updated linux-libc-dev from version 6.8.0-41.41 to 6.8.0-45.45
• Updated python3-pkg-resources from version 68.1.2-2ubuntu1 to 68.1.2-2ubuntu1.1
• Updated python3-setuptools from version 68.1.2-2ubuntu1 to 68.1.2-2ubuntu1.1
• Updated python3.12 from version 3.12.3-1ubuntu0.1 to 3.12.3-1ubuntu0.2
• Updated python3.12-minimal from version 3.12.3-1ubuntu0.1 to 3.12.3-1ubuntu0.2