Heroku-22, Heroku-24 and Heroku-26 stacks updated

Change effective on 12 August 2026

We updated the heroku-22, heroku-24 and heroku-26 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

The Heroku-22 stack is deprecated and will reach end-of-life on April 30th, 2027. Upgrade to a newer stack as soon as possible. See the Heroku-22 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-22

  • Updated distro-info-data from version 0.52ubuntu0.12 to 0.72-0ubuntu0.22.04.1
  • Updated libssl3 from version 3.0.2-0ubuntu1.25 to 3.0.2-0ubuntu1.26
  • Updated libsystemd0 from version 249.11-0ubuntu3.21 to 249.11-0ubuntu3.22
  • Updated libudev1 from version 249.11-0ubuntu3.21 to 249.11-0ubuntu3.22
  • Updated linux-libc-dev from version 5.15.0-186.196 to 5.15.0-187.197
  • Updated openssl from version 3.0.2-0ubuntu1.25 to 3.0.2-0ubuntu1.26
  • Updated systemd from version 249.11-0ubuntu3.21 to 249.11-0ubuntu3.22
  • Updated tzdata from version 2026b-0ubuntu0.22.04.1 to 2026c-0ubuntu0.22.04.1

Updates to packages available at build time only

  • Updated libssl-dev from version 3.0.2-0ubuntu1.25 to 3.0.2-0ubuntu1.26
  • Updated libsystemd-dev from version 249.11-0ubuntu3.21 to 249.11-0ubuntu3.22
  • Updated libudev-dev from version 249.11-0ubuntu3.21 to 249.11-0ubuntu3.22

Stack: heroku-24

  • Updated libssl3t64 from version 3.0.13-0ubuntu3.11 to 3.0.13-0ubuntu3.12
  • Updated libsystemd0 from version 255.4-1ubuntu8.16 to 255.4-1ubuntu8.17
  • Updated libudev1 from version 255.4-1ubuntu8.16 to 255.4-1ubuntu8.17
  • Updated openssl from version 3.0.13-0ubuntu3.11 to 3.0.13-0ubuntu3.12
  • Updated tzdata from version 2026b-0ubuntu0.24.04.1 to 2026c-0ubuntu0.24.04.1

Updates to packages available at build time only

  • Updated libssl-dev from version 3.0.13-0ubuntu3.11 to 3.0.13-0ubuntu3.12
  • Updated linux-libc-dev from version 6.8.0-136.136 to 6.8.0-137.137

Stack: heroku-26

  • Updated bind9-dnsutils from version 1:9.20.18-1ubuntu2.1 to 1:9.20.24-1ubuntu0.1
  • Updated bind9-host from version 1:9.20.18-1ubuntu2.1 to 1:9.20.24-1ubuntu0.1
  • Updated bind9-libs from version 1:9.20.18-1ubuntu2.1 to 1:9.20.24-1ubuntu0.1
  • Updated libssl3t64 from version 3.5.5-1ubuntu3.2 to 3.5.5-1ubuntu3.3
  • Updated libsystemd-shared from version 259.5-0ubuntu3 to 259.5-0ubuntu3.4
  • Updated libsystemd0 from version 259.5-0ubuntu3 to 259.5-0ubuntu3.4
  • Updated libudev1 from version 259.5-0ubuntu3 to 259.5-0ubuntu3.4
  • Updated openssl from version 3.5.5-1ubuntu3.2 to 3.5.5-1ubuntu3.3
  • Updated openssl-provider-legacy from version 3.5.5-1ubuntu3.2 to 3.5.5-1ubuntu3.3
  • Updated systemd from version 259.5-0ubuntu3 to 259.5-0ubuntu3.4
  • Updated tzdata from version 2026b-0ubuntu0.26.04.1 to 2026c-0ubuntu0.26.04.1

Updates to packages available at build time only

  • Updated libssl-dev from version 3.5.5-1ubuntu3.2 to 3.5.5-1ubuntu3.3
  • Updated linux-libc-dev from version 7.0.0-28.28 to 7.0.0-29.29