Heroku-22, Heroku-24 and Heroku-26 stacks updated

Change effective on 02 September 2026

We updated the heroku-22, heroku-24 and heroku-26 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

The Heroku-22 stack is deprecated and will reach end-of-life on April 30th, 2027. Upgrade to a newer stack as soon as possible. See the Heroku-22 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-22

  • Updated bind9-dnsutils from version 1:9.18.39-0ubuntu0.22.04.4 to 1:9.18.39-0ubuntu0.22.04.6
  • Updated bind9-host from version 1:9.18.39-0ubuntu0.22.04.4 to 1:9.18.39-0ubuntu0.22.04.6
  • Updated bind9-libs from version 1:9.18.39-0ubuntu0.22.04.4 to 1:9.18.39-0ubuntu0.22.04.6
  • Updated bsdutils from version 1:2.37.2-4ubuntu3.5 to 1:2.37.2-4ubuntu3.6
  • Updated bzip2 from version 1.0.8-5build1 to 1.0.8-5ubuntu0.1
  • Updated coreutils from version 8.32-4.1ubuntu1.3 to 8.32-4.1ubuntu1.4
  • Updated curl from version 7.81.0-1ubuntu1.25 to 7.81.0-1ubuntu1.27
  • Updated diffutils from version 1:3.8-0ubuntu2 to 1:3.8-0ubuntu2.1
  • Updated dnsutils from version 1:9.18.39-0ubuntu0.22.04.4 to 1:9.18.39-0ubuntu0.22.04.6
  • Updated libattr1 from version 1:2.5.1-1build1 to 1:2.5.1-1ubuntu0.1
  • Updated libblkid1 from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6
  • Updated libbz2-1.0 from version 1.0.8-5build1 to 1.0.8-5ubuntu0.1
  • Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.25 to 7.81.0-1ubuntu1.27
  • Updated libcurl4 from version 7.81.0-1ubuntu1.25 to 7.81.0-1ubuntu1.27
  • Updated libevent-2.1-7 from version 2.1.12-stable-1build3 to 2.1.12-stable-1ubuntu0.1
  • Updated libevent-core-2.1-7 from version 2.1.12-stable-1build3 to 2.1.12-stable-1ubuntu0.1
  • Updated libevent-extra-2.1-7 from version 2.1.12-stable-1build3 to 2.1.12-stable-1ubuntu0.1
  • Updated libevent-openssl-2.1-7 from version 2.1.12-stable-1build3 to 2.1.12-stable-1ubuntu0.1
  • Updated libevent-pthreads-2.1-7 from version 2.1.12-stable-1build3 to 2.1.12-stable-1ubuntu0.1
  • Updated libgcrypt20 from version 1.9.4-3ubuntu3.2 to 1.9.4-3ubuntu3.3
  • Updated libmount1 from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6
  • Updated libmysqlclient21 from version 8.0.46-0ubuntu0.22.04.3 to 8.0.46-0ubuntu0.22.04.4
  • Updated libncurses6 from version 6.3-2ubuntu0.2 to 6.3-2ubuntu0.3
  • Updated libncursesw6 from version 6.3-2ubuntu0.2 to 6.3-2ubuntu0.3
  • Updated libp11-kit0 from version 0.24.0-6build1 to 0.24.0-6ubuntu0.1
  • Updated libpam-modules from version 1.4.0-11ubuntu2.7 to 1.4.0-11ubuntu2.8
  • Updated libpam-modules-bin from version 1.4.0-11ubuntu2.7 to 1.4.0-11ubuntu2.8
  • Updated libpam-runtime from version 1.4.0-11ubuntu2.7 to 1.4.0-11ubuntu2.8
  • Updated libpam0g from version 1.4.0-11ubuntu2.7 to 1.4.0-11ubuntu2.8
  • Updated libperl5.34 from version 5.34.0-3ubuntu1.7 to 5.34.0-3ubuntu1.8
  • Updated libpython3.10-minimal from version 3.10.12-1~22.04.16 to 3.10.12-1~22.04.17
  • Updated libpython3.10-stdlib from version 3.10.12-1~22.04.16 to 3.10.12-1~22.04.17
  • Updated libsmartcols1 from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6
  • Updated libssh-4 from version 0.9.6-2ubuntu0.22.04.7 to 0.9.6-2ubuntu0.22.04.8
  • Updated libssl3 from version 3.0.2-0ubuntu1.26 to 3.0.2-0ubuntu1.29
  • Updated libtinfo6 from version 6.3-2ubuntu0.2 to 6.3-2ubuntu0.3
  • Updated libuuid1 from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6
  • Updated mount from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6
  • Updated ncurses-base from version 6.3-2ubuntu0.2 to 6.3-2ubuntu0.3
  • Updated ncurses-bin from version 6.3-2ubuntu0.2 to 6.3-2ubuntu0.3
  • Updated openssl from version 3.0.2-0ubuntu1.26 to 3.0.2-0ubuntu1.29
  • Updated perl from version 5.34.0-3ubuntu1.7 to 5.34.0-3ubuntu1.8
  • Updated perl-base from version 5.34.0-3ubuntu1.7 to 5.34.0-3ubuntu1.8
  • Updated perl-modules-5.34 from version 5.34.0-3ubuntu1.7 to 5.34.0-3ubuntu1.8
  • Updated python3.10 from version 3.10.12-1~22.04.16 to 3.10.12-1~22.04.17
  • Updated python3.10-minimal from version 3.10.12-1~22.04.16 to 3.10.12-1~22.04.17
  • Updated util-linux from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6
  • Updated wget from version 1.21.2-2ubuntu1.4 to 1.21.2-2ubuntu1.5

Updates to packages available at build time only

  • Updated libattr1-dev from version 1:2.5.1-1build1 to 1:2.5.1-1ubuntu0.1
  • Updated libblkid-dev from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6
  • Updated libbz2-dev from version 1.0.8-5build1 to 1.0.8-5ubuntu0.1
  • Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.25 to 7.81.0-1ubuntu1.27
  • Updated libevent-dev from version 2.1.12-stable-1build3 to 2.1.12-stable-1ubuntu0.1
  • Updated libgcrypt20-dev from version 1.9.4-3ubuntu3.2 to 1.9.4-3ubuntu3.3
  • Updated libmount-dev from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6
  • Updated libmysqlclient-dev from version 8.0.46-0ubuntu0.22.04.3 to 8.0.46-0ubuntu0.22.04.4
  • Updated libncurses-dev from version 6.3-2ubuntu0.2 to 6.3-2ubuntu0.3
  • Updated libncurses5-dev from version 6.3-2ubuntu0.2 to 6.3-2ubuntu0.3
  • Updated libncursesw5-dev from version 6.3-2ubuntu0.2 to 6.3-2ubuntu0.3
  • Updated libp11-kit-dev from version 0.24.0-6build1 to 0.24.0-6ubuntu0.1
  • Updated libpam0g-dev from version 1.4.0-11ubuntu2.7 to 1.4.0-11ubuntu2.8
  • Updated libpython3.10 from version 3.10.12-1~22.04.16 to 3.10.12-1~22.04.17
  • Updated libpython3.10-dev from version 3.10.12-1~22.04.16 to 3.10.12-1~22.04.17
  • Updated libssl-dev from version 3.0.2-0ubuntu1.26 to 3.0.2-0ubuntu1.29
  • Updated python3.10-dev from version 3.10.12-1~22.04.16 to 3.10.12-1~22.04.17
  • Updated uuid-dev from version 2.37.2-4ubuntu3.5 to 2.37.2-4ubuntu3.6

Stack: heroku-24

  • Updated bind9-dnsutils from version 1:9.18.39-0ubuntu0.24.04.5 to 1:9.18.39-0ubuntu0.24.04.7
  • Updated bind9-host from version 1:9.18.39-0ubuntu0.24.04.5 to 1:9.18.39-0ubuntu0.24.04.7
  • Updated bind9-libs from version 1:9.18.39-0ubuntu0.24.04.5 to 1:9.18.39-0ubuntu0.24.04.7
  • Updated bsdutils from version 1:2.39.3-9ubuntu6.5 to 1:2.39.3-9ubuntu6.6
  • Updated bzip2 from version 1.0.8-5.1build0.1 to 1.0.8-5.1ubuntu0.1
  • Updated coreutils from version 9.4-3ubuntu6.2 to 9.4-3ubuntu6.3
  • Updated curl from version 8.5.0-2ubuntu10.11 to 8.5.0-2ubuntu10.13
  • Updated diffutils from version 1:3.10-1build1 to 1:3.10-1ubuntu0.1
  • Updated libattr1 from version 1:2.5.2-1build1.1 to 1:2.5.2-1ubuntu0.1
  • Updated libblkid1 from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated libbz2-1.0 from version 1.0.8-5.1build0.1 to 1.0.8-5.1ubuntu0.1
  • Updated libcurl3t64-gnutls from version 8.5.0-2ubuntu10.11 to 8.5.0-2ubuntu10.13
  • Updated libcurl4t64 from version 8.5.0-2ubuntu10.11 to 8.5.0-2ubuntu10.13
  • Updated libevent-2.1-7t64 from version 2.1.12-stable-9ubuntu2 to 2.1.12-stable-9ubuntu2.1
  • Updated libevent-core-2.1-7t64 from version 2.1.12-stable-9ubuntu2 to 2.1.12-stable-9ubuntu2.1
  • Updated libevent-extra-2.1-7t64 from version 2.1.12-stable-9ubuntu2 to 2.1.12-stable-9ubuntu2.1
  • Updated libevent-openssl-2.1-7t64 from version 2.1.12-stable-9ubuntu2 to 2.1.12-stable-9ubuntu2.1
  • Updated libevent-pthreads-2.1-7t64 from version 2.1.12-stable-9ubuntu2 to 2.1.12-stable-9ubuntu2.1
  • Updated libgcrypt20 from version 1.10.3-2ubuntu0.1 to 1.10.3-2ubuntu0.2
  • Updated libheif-plugin-aomdec from version 1.17.6-1ubuntu4.6 to 1.17.6-1ubuntu4.8
  • Updated libheif-plugin-libde265 from version 1.17.6-1ubuntu4.6 to 1.17.6-1ubuntu4.8
  • Updated libheif1 from version 1.17.6-1ubuntu4.6 to 1.17.6-1ubuntu4.8
  • Updated libmount1 from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated libmysqlclient21 from version 8.0.46-0ubuntu0.24.04.3 to 8.0.46-0ubuntu0.24.04.4
  • Updated libncurses6 from version 6.4+20240113-1ubuntu2.1 to 6.4+20240113-1ubuntu2.2
  • Updated libncursesw6 from version 6.4+20240113-1ubuntu2.1 to 6.4+20240113-1ubuntu2.2
  • Updated libp11-kit0 from version 0.25.3-4ubuntu2.1 to 0.25.3-4ubuntu2.2
  • Updated libpam-modules from version 1.5.3-5ubuntu5.6 to 1.5.3-5ubuntu5.7
  • Updated libpam-modules-bin from version 1.5.3-5ubuntu5.6 to 1.5.3-5ubuntu5.7
  • Updated libpam-runtime from version 1.5.3-5ubuntu5.6 to 1.5.3-5ubuntu5.7
  • Updated libpam0g from version 1.5.3-5ubuntu5.6 to 1.5.3-5ubuntu5.7
  • Updated libperl5.38t64 from version 5.38.2-3.2ubuntu0.3 to 5.38.2-3.2ubuntu0.4
  • Updated libproc2-0 from version 2:4.0.4-4ubuntu3.2 to 2:4.0.4-4ubuntu3.3
  • Updated libsmartcols1 from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated libssh-4 from version 0.10.6-2ubuntu0.4 to 0.10.6-2ubuntu0.5
  • Updated libssl3t64 from version 3.0.13-0ubuntu3.12 to 3.0.13-0ubuntu3.15
  • Updated libtinfo6 from version 6.4+20240113-1ubuntu2.1 to 6.4+20240113-1ubuntu2.2
  • Updated libuuid1 from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated mount from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated ncurses-base from version 6.4+20240113-1ubuntu2.1 to 6.4+20240113-1ubuntu2.2
  • Updated ncurses-bin from version 6.4+20240113-1ubuntu2.1 to 6.4+20240113-1ubuntu2.2
  • Updated openssl from version 3.0.13-0ubuntu3.12 to 3.0.13-0ubuntu3.15
  • Updated perl from version 5.38.2-3.2ubuntu0.3 to 5.38.2-3.2ubuntu0.4
  • Updated perl-base from version 5.38.2-3.2ubuntu0.3 to 5.38.2-3.2ubuntu0.4
  • Updated perl-modules-5.38 from version 5.38.2-3.2ubuntu0.3 to 5.38.2-3.2ubuntu0.4
  • Updated procps from version 2:4.0.4-4ubuntu3.2 to 2:4.0.4-4ubuntu3.3
  • Updated util-linux from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated wget from version 1.21.4-1ubuntu4.4 to 1.21.4-1ubuntu4.5
  • Updated zlib1g from version 1:1.3.dfsg-3.1ubuntu2.1 to 1:1.3.dfsg-3.1ubuntu2.2

Updates to packages available at build time only

  • Updated libblkid-dev from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated libbz2-dev from version 1.0.8-5.1build0.1 to 1.0.8-5.1ubuntu0.1
  • Updated libcurl4-openssl-dev from version 8.5.0-2ubuntu10.11 to 8.5.0-2ubuntu10.13
  • Updated libevent-dev from version 2.1.12-stable-9ubuntu2 to 2.1.12-stable-9ubuntu2.1
  • Updated libheif-dev from version 1.17.6-1ubuntu4.6 to 1.17.6-1ubuntu4.8
  • Updated libmount-dev from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated libmysqlclient-dev from version 8.0.46-0ubuntu0.24.04.3 to 8.0.46-0ubuntu0.24.04.4
  • Updated libp11-kit-dev from version 0.25.3-4ubuntu2.1 to 0.25.3-4ubuntu2.2
  • Updated libpython3.12-minimal from version 3.12.3-1ubuntu0.15 to 3.12.3-1ubuntu0.16
  • Updated libpython3.12-stdlib from version 3.12.3-1ubuntu0.15 to 3.12.3-1ubuntu0.16
  • Updated libssl-dev from version 3.0.13-0ubuntu3.12 to 3.0.13-0ubuntu3.15
  • Updated libunbound8 from version 1.19.2-1ubuntu3.8 to 1.19.2-1ubuntu3.9
  • Updated python3.12 from version 3.12.3-1ubuntu0.15 to 3.12.3-1ubuntu0.16
  • Updated python3.12-minimal from version 3.12.3-1ubuntu0.15 to 3.12.3-1ubuntu0.16
  • Updated uuid-dev from version 2.39.3-9ubuntu6.5 to 2.39.3-9ubuntu6.6
  • Updated zlib1g-dev from version 1:1.3.dfsg-3.1ubuntu2.1 to 1:1.3.dfsg-3.1ubuntu2.2

Stack: heroku-26

  • Updated base-files from version 14ubuntu6.1 to 14ubuntu6.2
  • Updated bind9-dnsutils from version 1:9.20.24-1ubuntu0.1 to 1:9.20.24-1ubuntu0.3
  • Updated bind9-host from version 1:9.20.24-1ubuntu0.1 to 1:9.20.24-1ubuntu0.3
  • Updated bind9-libs from version 1:9.20.24-1ubuntu0.1 to 1:9.20.24-1ubuntu0.3
  • Updated bsdutils from version 1:2.41.3-3ubuntu2 to 1:2.41.3-3ubuntu2.2
  • Updated bzip2 from version 1.0.8-6build2 to 1.0.8-6ubuntu0.1
  • Updated curl from version 8.18.0-1ubuntu2.3 to 8.18.0-1ubuntu2.4
  • Updated diffutils from version 1:3.12-1 to 1:3.12-1ubuntu0.1
  • Updated gnu-coreutils from version 9.7-3ubuntu2 to 9.7-3ubuntu2.1
  • Updated libattr1 from version 1:2.5.2-4 to 1:2.5.2-4ubuntu0.1
  • Updated libblkid1 from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated libbz2-1.0 from version 1.0.8-6build2 to 1.0.8-6ubuntu0.1
  • Updated libcurl3t64-gnutls from version 8.18.0-1ubuntu2.3 to 8.18.0-1ubuntu2.4
  • Updated libcurl4t64 from version 8.18.0-1ubuntu2.3 to 8.18.0-1ubuntu2.4
  • Updated libevent-2.1-7t64 from version 2.1.12-stable-10build2 to 2.1.12-stable-10ubuntu0.1
  • Updated libevent-core-2.1-7t64 from version 2.1.12-stable-10build2 to 2.1.12-stable-10ubuntu0.1
  • Updated libevent-extra-2.1-7t64 from version 2.1.12-stable-10build2 to 2.1.12-stable-10ubuntu0.1
  • Updated libevent-openssl-2.1-7t64 from version 2.1.12-stable-10build2 to 2.1.12-stable-10ubuntu0.1
  • Updated libevent-pthreads-2.1-7t64 from version 2.1.12-stable-10build2 to 2.1.12-stable-10ubuntu0.1
  • Updated libgcrypt20 from version 1.12.0-2ubuntu1 to 1.12.0-2ubuntu1.1
  • Updated libheif-plugin-aomdec from version 1.21.2-3ubuntu0.3 to 1.21.2-3ubuntu0.4
  • Updated libheif-plugin-libde265 from version 1.21.2-3ubuntu0.3 to 1.21.2-3ubuntu0.4
  • Updated libheif1 from version 1.21.2-3ubuntu0.3 to 1.21.2-3ubuntu0.4
  • Updated libmount1 from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated libmysqlclient24 from version 8.4.10-0ubuntu0.26.04.1 to 8.4.11-0ubuntu0.26.04.1
  • Updated libpam-modules from version 1.7.0-5ubuntu3.1 to 1.7.0-5ubuntu3.2
  • Updated libpam-modules-bin from version 1.7.0-5ubuntu3.1 to 1.7.0-5ubuntu3.2
  • Updated libpam-runtime from version 1.7.0-5ubuntu3.1 to 1.7.0-5ubuntu3.2
  • Updated libpam0g from version 1.7.0-5ubuntu3.1 to 1.7.0-5ubuntu3.2
  • Updated libsmartcols1 from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated libssl3t64 from version 3.5.5-1ubuntu3.3 to 3.5.5-1ubuntu3.5
  • Updated libtiff6 from version 4.7.0-3ubuntu4 to 4.7.0-3ubuntu5
  • Updated libuuid1 from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated login from version 1:4.16.0-2+really2.41.3-3ubuntu2 to 1:4.16.0-2+really2.41.3-3ubuntu2.2
  • Updated mount from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated openssl from version 3.5.5-1ubuntu3.3 to 3.5.5-1ubuntu3.5
  • Updated openssl-provider-legacy from version 3.5.5-1ubuntu3.3 to 3.5.5-1ubuntu3.5
  • Updated util-linux from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated wget from version 1.25.0-2ubuntu4.3 to 1.25.0-2ubuntu4.4
  • Updated zlib1g from version 1:1.3.dfsg+really1.3.1-1ubuntu3 to 1:1.3.dfsg+really1.3.1-1ubuntu3.1

Updates to packages available at build time only

  • Updated libblkid-dev from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated libbz2-dev from version 1.0.8-6build2 to 1.0.8-6ubuntu0.1
  • Updated libcurl4-openssl-dev from version 8.18.0-1ubuntu2.3 to 8.18.0-1ubuntu2.4
  • Updated libevent-dev from version 2.1.12-stable-10build2 to 2.1.12-stable-10ubuntu0.1
  • Updated libheif-dev from version 1.21.2-3ubuntu0.3 to 1.21.2-3ubuntu0.4
  • Updated libmount-dev from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated libmysqlclient-dev from version 8.4.10-0ubuntu0.26.04.1 to 8.4.11-0ubuntu0.26.04.1
  • Updated libssl-dev from version 3.5.5-1ubuntu3.3 to 3.5.5-1ubuntu3.5
  • Updated libtiff-dev from version 4.7.0-3ubuntu4 to 4.7.0-3ubuntu5
  • Updated libtiffxx6 from version 4.7.0-3ubuntu4 to 4.7.0-3ubuntu5
  • Updated libunbound8 from version 1.24.2-1ubuntu2.1 to 1.24.2-1ubuntu2.2
  • Updated uuid-dev from version 2.41.3-3ubuntu2 to 2.41.3-3ubuntu2.2
  • Updated zlib1g-dev from version 1:1.3.dfsg+really1.3.1-1ubuntu3 to 1:1.3.dfsg+really1.3.1-1ubuntu3.1