Heroku-22, Heroku-24 and Heroku-26 stacks updated

Change effective on 30 July 2026

We updated the heroku-22, heroku-24 and heroku-26 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-22

• Updated libc-bin from version 2.35-0ubuntu3.13 to 2.35-0ubuntu3.14
• Updated libc-dev-bin from version 2.35-0ubuntu3.13 to 2.35-0ubuntu3.14
• Updated libc6 from version 2.35-0ubuntu3.13 to 2.35-0ubuntu3.14
• Updated libc6-dev from version 2.35-0ubuntu3.13 to 2.35-0ubuntu3.14
• Updated libexif12 from version 0.6.24-1build1 to 0.6.24-1ubuntu0.22.04.1
• Updated libgssapi-krb5-2 from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libjbig2dec0 from version 0.19-3build2 to 0.19-3ubuntu0.1
• Updated libk5crypto3 from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libkrb5-3 from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libkrb5support0 from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libpam-modules from version 1.4.0-11ubuntu2.6 to 1.4.0-11ubuntu2.7
• Updated libpam-modules-bin from version 1.4.0-11ubuntu2.6 to 1.4.0-11ubuntu2.7
• Updated libpam-runtime from version 1.4.0-11ubuntu2.6 to 1.4.0-11ubuntu2.7
• Updated libpam0g from version 1.4.0-11ubuntu2.6 to 1.4.0-11ubuntu2.7
• Updated libsqlite3-0 from version 3.37.2-2ubuntu0.6 to 3.37.2-2ubuntu0.7
• Updated libxpm4 from version 1:3.5.12-1ubuntu0.22.04.2 to 1:3.5.12-1ubuntu0.22.04.3
• Updated linux-libc-dev from version 5.15.0-185.195 to 5.15.0-186.196
• Updated locales from version 2.35-0ubuntu3.13 to 2.35-0ubuntu3.14
• Updated openssh-client from version 1:8.9p1-3ubuntu0.15 to 1:8.9p1-3ubuntu0.16
• Updated openssh-server from version 1:8.9p1-3ubuntu0.15 to 1:8.9p1-3ubuntu0.16
• Updated openssh-sftp-server from version 1:8.9p1-3ubuntu0.15 to 1:8.9p1-3ubuntu0.16
• Updated postgresql-client-common from version 291.pgdg22.04+1 to 293.pgdg22.04+1
• Updated tar from version 1.34+dfsg-1ubuntu0.1.22.04.4 to 1.34+dfsg-1ubuntu0.1.22.04.6
• Updated wget from version 1.21.2-2ubuntu1.1 to 1.21.2-2ubuntu1.4

Updates to packages available at build time only

• Updated krb5-multidev from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libarchive13 from version 3.6.0-1ubuntu1.7 to 3.6.0-1ubuntu1.8
• Updated libexif-dev from version 0.6.24-1build1 to 0.6.24-1ubuntu0.22.04.1
• Updated libgssrpc4 from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libkadm5clnt-mit12 from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libkadm5srv-mit12 from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libkdb5-10 from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libkrb5-dev from version 1.19.2-2ubuntu0.7 to 1.19.2-2ubuntu0.8
• Updated libpam0g-dev from version 1.4.0-11ubuntu2.6 to 1.4.0-11ubuntu2.7
• Updated libxpm-dev from version 1:3.5.12-1ubuntu0.22.04.2 to 1:3.5.12-1ubuntu0.22.04.3

Stack: heroku-24

• Updated libarchive13t64 from version 3.7.2-2ubuntu0.7 to 3.7.2-2ubuntu0.8
• Updated libc-bin from version 2.39-0ubuntu8.7 to 2.39-0ubuntu8.8
• Updated libc6 from version 2.39-0ubuntu8.7 to 2.39-0ubuntu8.8
• Updated libde265-0 from version 1.0.15-1build3 to 1.0.15-1ubuntu0.1
• Updated libexif12 from version 0.6.24-1build2 to 0.6.24-1ubuntu0.24.04.1
• Updated libgssapi-krb5-2 from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libheif-plugin-aomdec from version 1.17.6-1ubuntu4.5 to 1.17.6-1ubuntu4.6
• Updated libheif-plugin-libde265 from version 1.17.6-1ubuntu4.5 to 1.17.6-1ubuntu4.6
• Updated libheif1 from version 1.17.6-1ubuntu4.5 to 1.17.6-1ubuntu4.6
• Updated libjbig2dec0 from version 0.20-1build3 to 0.20-1ubuntu0.24.04.1
• Updated libk5crypto3 from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libkrb5-3 from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libkrb5support0 from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libpam-modules from version 1.5.3-5ubuntu5.5 to 1.5.3-5ubuntu5.6
• Updated libpam-modules-bin from version 1.5.3-5ubuntu5.5 to 1.5.3-5ubuntu5.6
• Updated libpam-runtime from version 1.5.3-5ubuntu5.5 to 1.5.3-5ubuntu5.6
• Updated libpam0g from version 1.5.3-5ubuntu5.5 to 1.5.3-5ubuntu5.6
• Updated libsqlite3-0 from version 3.45.1-1ubuntu2.6 to 3.45.1-1ubuntu2.7
• Updated libxpm4 from version 1:3.5.17-1build2 to 1:3.5.17-1ubuntu0.24.04.1
• Updated locales from version 2.39-0ubuntu8.7 to 2.39-0ubuntu8.8
• Updated openssh-client from version 1:9.6p1-3ubuntu13.16 to 1:9.6p1-3ubuntu13.18
• Updated openssh-server from version 1:9.6p1-3ubuntu13.16 to 1:9.6p1-3ubuntu13.18
• Updated openssh-sftp-server from version 1:9.6p1-3ubuntu13.16 to 1:9.6p1-3ubuntu13.18
• Updated postgresql-client-common from version 291.pgdg24.04+1 to 293.pgdg24.04+1
• Updated tar from version 1.35+dfsg-3ubuntu0.2 to 1.35+dfsg-3ubuntu0.4
• Updated wget from version 1.21.4-1ubuntu4.1 to 1.21.4-1ubuntu4.4

Updates to packages available at build time only

• Updated krb5-multidev from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libc-dev-bin from version 2.39-0ubuntu8.7 to 2.39-0ubuntu8.8
• Updated libc6-dev from version 2.39-0ubuntu8.7 to 2.39-0ubuntu8.8
• Updated libde265-dev from version 1.0.15-1build3 to 1.0.15-1ubuntu0.1
• Updated libexif-dev from version 0.6.24-1build2 to 0.6.24-1ubuntu0.24.04.1
• Updated libgssrpc4t64 from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libheif-dev from version 1.17.6-1ubuntu4.5 to 1.17.6-1ubuntu4.6
• Updated libkadm5clnt-mit12 from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libkadm5srv-mit12 from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libkdb5-10t64 from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libkrb5-dev from version 1.20.1-6ubuntu2.6 to 1.20.1-6ubuntu2.7
• Updated libxpm-dev from version 1:3.5.17-1build2 to 1:3.5.17-1ubuntu0.24.04.1
• Updated linux-libc-dev from version 6.8.0-134.134 to 6.8.0-136.136

Stack: heroku-26

• Updated libarchive13t64 from version 3.8.5-1ubuntu2.1 to 3.8.5-1ubuntu2.2
• Updated libc-bin from version 2.43-2ubuntu2 to 2.43-2ubuntu2.3
• Updated libc-gconv-modules-extra from version 2.43-2ubuntu2 to 2.43-2ubuntu2.3
• Updated libc6 from version 2.43-2ubuntu2 to 2.43-2ubuntu2.3
• Updated libexif12 from version 0.6.25-2 to 0.6.25-2ubuntu0.1
• Updated libfreetype6 from version 2.14.2+dfsg-1 to 2.14.2+dfsg-1ubuntu0.1
• Updated libgssapi-krb5-2 from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libjbig2dec0 from version 0.20-1build4 to 0.20-1ubuntu0.26.04.1
• Updated libk5crypto3 from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libkrb5-3 from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libkrb5support0 from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libpam-modules from version 1.7.0-5ubuntu3 to 1.7.0-5ubuntu3.1
• Updated libpam-modules-bin from version 1.7.0-5ubuntu3 to 1.7.0-5ubuntu3.1
• Updated libpam-runtime from version 1.7.0-5ubuntu3 to 1.7.0-5ubuntu3.1
• Updated libpam0g from version 1.7.0-5ubuntu3 to 1.7.0-5ubuntu3.1
• Updated libsqlite3-0 from version 3.46.1-9ubuntu0.1 to 3.46.1-9ubuntu0.2
• Updated libssh2-1t64 from version 1.11.1-1ubuntu0.26.04.2 to 1.11.1-1ubuntu0.26.04.3
• Updated libxpm4 from version 1:3.5.17-1build3 to 1:3.5.17-1ubuntu0.26.04.1
• Updated locales from version 2.43-2ubuntu2 to 2.43-2ubuntu2.3
• Updated openssh-client from version 1:10.2p1-2ubuntu3.2 to 1:10.2p1-2ubuntu3.5
• Updated openssh-server from version 1:10.2p1-2ubuntu3.2 to 1:10.2p1-2ubuntu3.5
• Updated openssh-sftp-server from version 1:10.2p1-2ubuntu3.2 to 1:10.2p1-2ubuntu3.5
• Updated postgresql-client-common from version 291.pgdg26.04+1 to 293.pgdg26.04+1
• Updated tar from version 1.35+dfsg-4ubuntu0.2 to 1.35+dfsg-4ubuntu0.4
• Updated wget from version 1.25.0-2ubuntu4 to 1.25.0-2ubuntu4.3

Updates to packages available at build time only

• Updated build-essential from version 12.12ubuntu2.26.04.1 to 12.12ubuntu2.26.04.2
• Updated krb5-multidev from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libc-dev-bin from version 2.43-2ubuntu2 to 2.43-2ubuntu2.3
• Updated libc6-dev from version 2.43-2ubuntu2 to 2.43-2ubuntu2.3
• Updated libexif-dev from version 0.6.25-2 to 0.6.25-2ubuntu0.1
• Updated libfreetype-dev from version 2.14.2+dfsg-1 to 2.14.2+dfsg-1ubuntu0.1
• Updated libgssrpc4t64 from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libkadm5clnt-mit12 from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libkadm5srv-mit12 from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libkdb5-10t64 from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libkrb5-dev from version 1.22.1-2ubuntu4 to 1.22.1-2ubuntu4.1
• Updated libssh2-1-dev from version 1.11.1-1ubuntu0.26.04.2 to 1.11.1-1ubuntu0.26.04.3
• Updated libxpm-dev from version 1:3.5.17-1build3 to 1:3.5.17-1ubuntu0.26.04.1
• Updated linux-libc-dev from version 7.0.0-27.27 to 7.0.0-28.28