Heroku-22 and Heroku-24 stacks updated

Change effective on 15 December 2025

We updated the heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-22

  • Updated binutils from version 2.38-4ubuntu2.11 to 2.38-4ubuntu2.12
  • Updated binutils-aarch64-linux-gnu/binutils-x86-64-linux-gnu from version 2.38-4ubuntu2.11 to 2.38-4ubuntu2.12
  • Updated binutils-common from version 2.38-4ubuntu2.11 to 2.38-4ubuntu2.12
  • Updated libapparmor1 from version 3.0.4-2ubuntu2.4 to 3.0.4-2ubuntu2.5
  • Updated libbinutils from version 2.38-4ubuntu2.11 to 2.38-4ubuntu2.12
  • Updated libctf-nobfd0 from version 2.38-4ubuntu2.11 to 2.38-4ubuntu2.12
  • Updated libctf0 from version 2.38-4ubuntu2.11 to 2.38-4ubuntu2.12
  • Updated libcups2 from version 2.4.1op1-1ubuntu4.15 to 2.4.1op1-1ubuntu4.16
  • Updated libmysqlclient21 from version 8.0.44-0ubuntu0.22.04.1 to 8.0.44-0ubuntu0.22.04.2
  • Updated libpng16-16 from version 1.6.37-3build5 to 1.6.37-3ubuntu0.1
  • Updated linux-libc-dev from version 5.15.0-163.173 to 5.15.0-164.174

Updates to packages available at build time only

  • Updated libmysqlclient-dev from version 8.0.44-0ubuntu0.22.04.1 to 8.0.44-0ubuntu0.22.04.2
  • Updated libpng-dev from version 1.6.37-3build5 to 1.6.37-3ubuntu0.1
  • Updated python3-urllib3 from version 1.26.5-1~exp1ubuntu0.3 to 1.26.5-1~exp1ubuntu0.4

Stack: heroku-24

  • Updated binutils from version 2.42-4ubuntu2.7 to 2.42-4ubuntu2.8
  • Updated binutils-aarch64-linux-gnu/binutils-x86-64-linux-gnu from version 2.42-4ubuntu2.7 to 2.42-4ubuntu2.8
  • Updated binutils-common from version 2.42-4ubuntu2.7 to 2.42-4ubuntu2.8
  • Updated gir1.2-glib-2.0 from version 2.80.0-6ubuntu3.4 to 2.80.0-6ubuntu3.5
  • Updated libbinutils from version 2.42-4ubuntu2.7 to 2.42-4ubuntu2.8
  • Updated libctf-nobfd0 from version 2.42-4ubuntu2.7 to 2.42-4ubuntu2.8
  • Updated libctf0 from version 2.42-4ubuntu2.7 to 2.42-4ubuntu2.8
  • Updated libcups2t64 from version 2.4.7-1.2ubuntu7.7 to 2.4.7-1.2ubuntu7.9
  • Updated libglib2.0-0t64 from version 2.80.0-6ubuntu3.4 to 2.80.0-6ubuntu3.5
  • Updated libgprofng0 from version 2.42-4ubuntu2.7 to 2.42-4ubuntu2.8
  • Updated libmysqlclient21 from version 8.0.44-0ubuntu0.24.04.1 to 8.0.44-0ubuntu0.24.04.2
  • Updated libpng16-16t64 from version 1.6.43-5build1 to 1.6.43-5ubuntu0.1
  • Updated libsframe1 from version 2.42-4ubuntu2.7 to 2.42-4ubuntu2.8

Updates to packages available at build time only

  • Updated gir1.2-glib-2.0-dev from version 2.80.0-6ubuntu3.4 to 2.80.0-6ubuntu3.5
  • Updated libgirepository-2.0-0 from version 2.80.0-6ubuntu3.4 to 2.80.0-6ubuntu3.5
  • Updated libglib2.0-bin from version 2.80.0-6ubuntu3.4 to 2.80.0-6ubuntu3.5
  • Updated libglib2.0-data from version 2.80.0-6ubuntu3.4 to 2.80.0-6ubuntu3.5
  • Updated libglib2.0-dev from version 2.80.0-6ubuntu3.4 to 2.80.0-6ubuntu3.5
  • Updated libglib2.0-dev-bin from version 2.80.0-6ubuntu3.4 to 2.80.0-6ubuntu3.5
  • Updated libmysqlclient-dev from version 8.0.44-0ubuntu0.24.04.1 to 8.0.44-0ubuntu0.24.04.2
  • Updated libpng-dev from version 1.6.43-5build1 to 1.6.43-5ubuntu0.1
  • Updated linux-libc-dev from version 6.8.0-88.89 to 6.8.0-90.91