Heroku-22, Heroku-24 and Heroku-26 stacks updated

Change effective on 03 June 2026

We updated the heroku-22, heroku-24 and heroku-26 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

The Heroku-22 stack is deprecated and will reach end-of-life on April 30th, 2027. Upgrade to a newer stack as soon as possible. See the Heroku-22 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-22

  • Updated bind9-dnsutils from version 1:9.18.39-0ubuntu0.22.04.3 to 1:9.18.39-0ubuntu0.22.04.4
  • Updated bind9-host from version 1:9.18.39-0ubuntu0.22.04.3 to 1:9.18.39-0ubuntu0.22.04.4
  • Updated bind9-libs from version 1:9.18.39-0ubuntu0.22.04.3 to 1:9.18.39-0ubuntu0.22.04.4
  • Updated dnsutils from version 1:9.18.39-0ubuntu0.22.04.3 to 1:9.18.39-0ubuntu0.22.04.4
  • Updated libgcrypt20 from version 1.9.4-3ubuntu3 to 1.9.4-3ubuntu3.2
  • Updated libgnutls-openssl27 from version 3.7.3-4ubuntu1.8 to 3.7.3-4ubuntu1.9
  • Updated libgnutls30 from version 3.7.3-4ubuntu1.8 to 3.7.3-4ubuntu1.9
  • Updated libgnutlsxx28 from version 3.7.3-4ubuntu1.8 to 3.7.3-4ubuntu1.9
  • Updated liblzma5 from version 5.2.5-2ubuntu1 to 5.2.5-2ubuntu1.1
  • Updated libmysqlclient21 from version 8.0.45-0ubuntu0.22.04.1 to 8.0.46-0ubuntu0.22.04.2
  • Updated rsync from version 3.2.7-0ubuntu0.22.04.4 to 3.2.7-0ubuntu0.22.04.6
  • Updated xz-utils from version 5.2.5-2ubuntu1 to 5.2.5-2ubuntu1.1

Updates to packages available at build time only

  • Updated libarchive13 from version 3.6.0-1ubuntu1.6 to 3.6.0-1ubuntu1.7
  • Updated libgcrypt20-dev from version 1.9.4-3ubuntu3 to 1.9.4-3ubuntu3.2
  • Updated libgnutls-dane0 from version 3.7.3-4ubuntu1.8 to 3.7.3-4ubuntu1.9
  • Updated libgnutls28-dev from version 3.7.3-4ubuntu1.8 to 3.7.3-4ubuntu1.9
  • Updated liblzma-dev from version 5.2.5-2ubuntu1 to 5.2.5-2ubuntu1.1
  • Updated libmysqlclient-dev from version 8.0.45-0ubuntu0.22.04.1 to 8.0.46-0ubuntu0.22.04.2
  • Updated libunbound8 from version 1.13.1-1ubuntu5.14 to 1.13.1-1ubuntu5.15

Stack: heroku-24

  • Updated bind9-dnsutils from version 1:9.18.39-0ubuntu0.24.04.3 to 1:9.18.39-0ubuntu0.24.04.5
  • Updated bind9-host from version 1:9.18.39-0ubuntu0.24.04.3 to 1:9.18.39-0ubuntu0.24.04.5
  • Updated bind9-libs from version 1:9.18.39-0ubuntu0.24.04.3 to 1:9.18.39-0ubuntu0.24.04.5
  • Updated libarchive13t64 from version 3.7.2-2ubuntu0.6 to 3.7.2-2ubuntu0.7
  • Updated libgcrypt20 from version 1.10.3-2build1 to 1.10.3-2ubuntu0.1
  • Updated libgnutls-openssl27t64 from version 3.8.3-1.1ubuntu3.5 to 3.8.3-1.1ubuntu3.6
  • Updated libgnutls30t64 from version 3.8.3-1.1ubuntu3.5 to 3.8.3-1.1ubuntu3.6
  • Updated liblzma5 from version 5.6.1+really5.4.5-1ubuntu0.2 to 5.6.1+really5.4.5-1ubuntu0.3
  • Updated libmysqlclient21 from version 8.0.45-0ubuntu0.24.04.1 to 8.0.46-0ubuntu0.24.04.2
  • Updated rsync from version 3.2.7-1ubuntu1.2 to 3.2.7-1ubuntu1.4
  • Updated xz-utils from version 5.6.1+really5.4.5-1ubuntu0.2 to 5.6.1+really5.4.5-1ubuntu0.3

Updates to packages available at build time only

  • Updated libgnutls-dane0t64 from version 3.8.3-1.1ubuntu3.5 to 3.8.3-1.1ubuntu3.6
  • Updated libgnutls28-dev from version 3.8.3-1.1ubuntu3.5 to 3.8.3-1.1ubuntu3.6
  • Updated liblzma-dev from version 5.6.1+really5.4.5-1ubuntu0.2 to 5.6.1+really5.4.5-1ubuntu0.3
  • Updated libmysqlclient-dev from version 8.0.45-0ubuntu0.24.04.1 to 8.0.46-0ubuntu0.24.04.2
  • Updated libunbound8 from version 1.19.2-1ubuntu3.7 to 1.19.2-1ubuntu3.8
  • Updated linux-libc-dev from version 6.8.0-117.117 to 6.8.0-124.124

Stack: heroku-26

  • Updated bind9-dnsutils from version 1:9.20.18-1ubuntu2 to 1:9.20.18-1ubuntu2.1
  • Updated bind9-host from version 1:9.20.18-1ubuntu2 to 1:9.20.18-1ubuntu2.1
  • Updated bind9-libs from version 1:9.20.18-1ubuntu2 to 1:9.20.18-1ubuntu2.1
  • Updated bubblewrap from version 0.11.1-1 to 0.11.1-1ubuntu0.1
  • Updated libarchive13t64 from version 3.8.5-1ubuntu2 to 3.8.5-1ubuntu2.1
  • Updated libgcrypt20 from version 1.12.0-2 to 1.12.0-2ubuntu0.1
  • Updated libgnutls-openssl27t64 from version 3.8.12-2ubuntu1 to 3.8.12-2ubuntu1.1
  • Updated libgnutls30t64 from version 3.8.12-2ubuntu1 to 3.8.12-2ubuntu1.1
  • Updated libmysqlclient24 from version 8.4.8-0ubuntu1 to 8.4.9-0ubuntu0.26.04.1
  • Updated libssh2-1t64 from version 1.11.1-1build2 to 1.11.1-1ubuntu0.26.04.1
  • Updated rsync from version 3.4.1+ds1-7 to 3.4.1+ds1-7ubuntu0.2

Updates to packages available at build time only

  • Updated libgnutls-dane0t64 from version 3.8.12-2ubuntu1 to 3.8.12-2ubuntu1.1
  • Updated libgnutls28-dev from version 3.8.12-2ubuntu1 to 3.8.12-2ubuntu1.1
  • Updated libmysqlclient-dev from version 8.4.8-0ubuntu1 to 8.4.9-0ubuntu0.26.04.1
  • Updated libssh2-1-dev from version 1.11.1-1build2 to 1.11.1-1ubuntu0.26.04.1
  • Updated libunbound8 from version 1.24.2-1ubuntu2 to 1.24.2-1ubuntu2.1
  • Updated linux-libc-dev from version 7.0.0-15.15 to 7.0.0-22.22