Heroku-22, Heroku-24 and Heroku-26 stacks updated

Change effective on 08 October 2026

We have updated the heroku-22, heroku-24 and heroku-26 stacks to pick up security and bug fixes in upstream packages. The new base images for each stack will roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to receive these changes. For Cedar-generation apps, each time a dyno starts, the slug is overlaid on top of the most recent base image. For Fir-generation apps, the built image is rebased on top of the most recent base image.

If your app uses Heroku’s container stack, you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the package versions available in each stack’s base image.

The Heroku-22 stack is deprecated and will reach end-of-life on April 30th, 2027. Upgrade to a newer stack as soon as possible. See the Heroku-22 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-22

  • Updated curl from version 7.81.0-1ubuntu1.27 to 7.81.0-1ubuntu1.29
  • Updated ghostscript from version 9.55.0~dfsg1-0ubuntu5.13 to 9.55.0~dfsg1-0ubuntu5.14
  • Updated libaudit-common from version 1:3.0.7-1build1 to 1:3.0.7-1ubuntu0.1
  • Updated libaudit1 from version 1:3.0.7-1build1 to 1:3.0.7-1ubuntu0.1
  • Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.27 to 7.81.0-1ubuntu1.29
  • Updated libcurl4 from version 7.81.0-1ubuntu1.27 to 7.81.0-1ubuntu1.29
  • Updated libevent-2.1-7 from version 2.1.12-stable-1ubuntu0.1 to 2.1.12-stable-1ubuntu0.2
  • Updated libevent-core-2.1-7 from version 2.1.12-stable-1ubuntu0.1 to 2.1.12-stable-1ubuntu0.2
  • Updated libevent-extra-2.1-7 from version 2.1.12-stable-1ubuntu0.1 to 2.1.12-stable-1ubuntu0.2
  • Updated libevent-openssl-2.1-7 from version 2.1.12-stable-1ubuntu0.1 to 2.1.12-stable-1ubuntu0.2
  • Updated libevent-pthreads-2.1-7 from version 2.1.12-stable-1ubuntu0.1 to 2.1.12-stable-1ubuntu0.2
  • Updated libexpat1 from version 2.4.7-1ubuntu0.7 to 2.4.7-1ubuntu0.9
  • Updated libfreetype6 from version 2.11.1+dfsg-1ubuntu0.3 to 2.11.1+dfsg-1ubuntu0.4
  • Updated libglib2.0-0 from version 2.72.4-0ubuntu2.9 to 2.72.4-0ubuntu2.10
  • Updated libgs9 from version 9.55.0~dfsg1-0ubuntu5.13 to 9.55.0~dfsg1-0ubuntu5.14
  • Updated libgs9-common from version 9.55.0~dfsg1-0ubuntu5.13 to 9.55.0~dfsg1-0ubuntu5.14
  • Updated libpoppler-glib8 from version 22.02.0-2ubuntu0.13 to 22.02.0-2ubuntu0.14
  • Updated libpoppler118 from version 22.02.0-2ubuntu0.13 to 22.02.0-2ubuntu0.14
  • Updated libssl3 from version 3.0.2-0ubuntu1.29 to 3.0.2-0ubuntu1.30
  • Updated libxml2 from version 2.9.13+dfsg-1ubuntu0.12 to 2.9.13+dfsg-1ubuntu0.13
  • Updated libxpm4 from version 1:3.5.12-1ubuntu0.22.04.3 to 1:3.5.12-1ubuntu0.22.04.4
  • Updated linux-libc-dev from version 5.15.0-191.201 to 5.15.0-198.208
  • Updated openssl from version 3.0.2-0ubuntu1.29 to 3.0.2-0ubuntu1.30
  • Updated poppler-utils from version 22.02.0-2ubuntu0.13 to 22.02.0-2ubuntu0.14

Updates to packages available at build time only

  • Updated libaudit-dev from version 1:3.0.7-1build1 to 1:3.0.7-1ubuntu0.1
  • Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.27 to 7.81.0-1ubuntu1.29
  • Updated libevent-dev from version 2.1.12-stable-1ubuntu0.1 to 2.1.12-stable-1ubuntu0.2
  • Updated libexpat1-dev from version 2.4.7-1ubuntu0.7 to 2.4.7-1ubuntu0.9
  • Updated libfreetype-dev from version 2.11.1+dfsg-1ubuntu0.3 to 2.11.1+dfsg-1ubuntu0.4
  • Updated libfreetype6-dev from version 2.11.1+dfsg-1ubuntu0.3 to 2.11.1+dfsg-1ubuntu0.4
  • Updated libglib2.0-bin from version 2.72.4-0ubuntu2.9 to 2.72.4-0ubuntu2.10
  • Updated libglib2.0-data from version 2.72.4-0ubuntu2.9 to 2.72.4-0ubuntu2.10
  • Updated libglib2.0-dev from version 2.72.4-0ubuntu2.9 to 2.72.4-0ubuntu2.10
  • Updated libglib2.0-dev-bin from version 2.72.4-0ubuntu2.9 to 2.72.4-0ubuntu2.10
  • Updated libgs-dev from version 9.55.0~dfsg1-0ubuntu5.13 to 9.55.0~dfsg1-0ubuntu5.14
  • Updated libssl-dev from version 3.0.2-0ubuntu1.29 to 3.0.2-0ubuntu1.30
  • Updated libunbound8 from version 1.13.1-1ubuntu5.15 to 1.13.1-1ubuntu5.16
  • Updated libxml2-dev from version 2.9.13+dfsg-1ubuntu0.12 to 2.9.13+dfsg-1ubuntu0.13
  • Updated libxpm-dev from version 1:3.5.12-1ubuntu0.22.04.3 to 1:3.5.12-1ubuntu0.22.04.4

Stack: heroku-24

  • Updated curl from version 8.5.0-2ubuntu10.13 to 8.5.0-2ubuntu10.15
  • Updated ghostscript from version 10.02.1~dfsg1-0ubuntu7.8 to 10.02.1~dfsg1-0ubuntu7.9
  • Updated gir1.2-glib-2.0 from version 2.80.0-6ubuntu3.8 to 2.80.0-6ubuntu3.9
  • Updated libaudit-common from version 1:3.1.2-2.1build1.1 to 1:3.1.2-2.1ubuntu0.1
  • Updated libaudit1 from version 1:3.1.2-2.1build1.1 to 1:3.1.2-2.1ubuntu0.1
  • Updated libcurl3t64-gnutls from version 8.5.0-2ubuntu10.13 to 8.5.0-2ubuntu10.15
  • Updated libcurl4t64 from version 8.5.0-2ubuntu10.13 to 8.5.0-2ubuntu10.15
  • Updated libevent-2.1-7t64 from version 2.1.12-stable-9ubuntu2.1 to 2.1.12-stable-9ubuntu2.2
  • Updated libevent-core-2.1-7t64 from version 2.1.12-stable-9ubuntu2.1 to 2.1.12-stable-9ubuntu2.2
  • Updated libevent-extra-2.1-7t64 from version 2.1.12-stable-9ubuntu2.1 to 2.1.12-stable-9ubuntu2.2
  • Updated libevent-openssl-2.1-7t64 from version 2.1.12-stable-9ubuntu2.1 to 2.1.12-stable-9ubuntu2.2
  • Updated libevent-pthreads-2.1-7t64 from version 2.1.12-stable-9ubuntu2.1 to 2.1.12-stable-9ubuntu2.2
  • Updated libexpat1 from version 2.6.1-2ubuntu0.4 to 2.6.1-2ubuntu0.6
  • Updated libfreetype6 from version 2.13.2+dfsg-1ubuntu0.1 to 2.13.2+dfsg-1ubuntu0.2
  • Updated libglib2.0-0t64 from version 2.80.0-6ubuntu3.8 to 2.80.0-6ubuntu3.9
  • Updated libgs-common from version 10.02.1~dfsg1-0ubuntu7.8 to 10.02.1~dfsg1-0ubuntu7.9
  • Updated libgs10 from version 10.02.1~dfsg1-0ubuntu7.8 to 10.02.1~dfsg1-0ubuntu7.9
  • Updated libgs10-common from version 10.02.1~dfsg1-0ubuntu7.8 to 10.02.1~dfsg1-0ubuntu7.9
  • Updated libheif-plugin-aomdec from version 1.17.6-1ubuntu4.8 to 1.17.6-1ubuntu4.9
  • Updated libheif-plugin-libde265 from version 1.17.6-1ubuntu4.8 to 1.17.6-1ubuntu4.9
  • Updated libheif1 from version 1.17.6-1ubuntu4.8 to 1.17.6-1ubuntu4.9
  • Updated libpoppler-glib8t64 from version 24.02.0-1ubuntu9.9 to 24.02.0-1ubuntu9.10
  • Updated libpoppler134 from version 24.02.0-1ubuntu9.9 to 24.02.0-1ubuntu9.10
  • Updated librsvg2-2 from version 2.58.0+dfsg-1build1 to 2.58.0+dfsg-1ubuntu0.1
  • Updated librsvg2-common from version 2.58.0+dfsg-1build1 to 2.58.0+dfsg-1ubuntu0.1
  • Updated libssl3t64 from version 3.0.13-0ubuntu3.15 to 3.0.13-0ubuntu3.16
  • Updated libxml2 from version 2.9.14+dfsg-1.3ubuntu3.8 to 2.9.14+dfsg-1.3ubuntu3.9
  • Updated libxpm4 from version 1:3.5.17-1ubuntu0.24.04.1 to 1:3.5.17-1ubuntu0.24.04.2
  • Updated openssl from version 3.0.13-0ubuntu3.15 to 3.0.13-0ubuntu3.16
  • Updated poppler-utils from version 24.02.0-1ubuntu9.9 to 24.02.0-1ubuntu9.10

Updates to packages available at build time only

  • Removed gir1.2-girepository-2.0
  • Removed gir1.2-girepository-2.0-dev
  • Removed gobject-introspection
  • Removed gobject-introspection-bin
  • Removed libgirepository-1.0-1
  • Removed libgirepository-1.0-dev
  • Removed libgirepository1.0-dev
  • Removed python3-mako
  • Removed python3-markdown
  • Removed python3-markupsafe
  • Removed python3-pkg-resources
  • Removed python3-setuptools
  • Updated gir1.2-glib-2.0-dev from version 2.80.0-6ubuntu3.8 to 2.80.0-6ubuntu3.9
  • Updated gir1.2-rsvg-2.0 from version 2.58.0+dfsg-1build1 to 2.58.0+dfsg-1ubuntu0.1
  • Updated libcurl4-openssl-dev from version 8.5.0-2ubuntu10.13 to 8.5.0-2ubuntu10.15
  • Updated libevent-dev from version 2.1.12-stable-9ubuntu2.1 to 2.1.12-stable-9ubuntu2.2
  • Updated libexpat1-dev from version 2.6.1-2ubuntu0.4 to 2.6.1-2ubuntu0.6
  • Updated libfreetype-dev from version 2.13.2+dfsg-1ubuntu0.1 to 2.13.2+dfsg-1ubuntu0.2
  • Updated libgirepository-2.0-0 from version 2.80.0-6ubuntu3.8 to 2.80.0-6ubuntu3.9
  • Updated libglib2.0-bin from version 2.80.0-6ubuntu3.8 to 2.80.0-6ubuntu3.9
  • Updated libglib2.0-data from version 2.80.0-6ubuntu3.8 to 2.80.0-6ubuntu3.9
  • Updated libglib2.0-dev from version 2.80.0-6ubuntu3.8 to 2.80.0-6ubuntu3.9
  • Updated libglib2.0-dev-bin from version 2.80.0-6ubuntu3.8 to 2.80.0-6ubuntu3.9
  • Updated libheif-dev from version 1.17.6-1ubuntu4.8 to 1.17.6-1ubuntu4.9
  • Updated librsvg2-dev from version 2.58.0+dfsg-1build1 to 2.58.0+dfsg-1ubuntu0.1
  • Updated libssl-dev from version 3.0.13-0ubuntu3.15 to 3.0.13-0ubuntu3.16
  • Updated libunbound8 from version 1.19.2-1ubuntu3.9 to 1.19.2-1ubuntu3.10
  • Updated libxml2-dev from version 2.9.14+dfsg-1.3ubuntu3.8 to 2.9.14+dfsg-1.3ubuntu3.9
  • Updated libxpm-dev from version 1:3.5.17-1ubuntu0.24.04.1 to 1:3.5.17-1ubuntu0.24.04.2
  • Updated linux-libc-dev from version 6.8.0-139.139 to 6.8.0-146.146

Stack: heroku-26

  • Updated curl from version 8.18.0-1ubuntu2.5 to 8.18.0-1ubuntu2.7
  • Updated ghostscript from version 10.06.0~dfsg-3ubuntu1 to 10.06.0~dfsg-3ubuntu1.1
  • Updated gir1.2-glib-2.0 from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated glycin-loaders from version 2.1.1+ds-0ubuntu1 to 2.1.5+ds-0ubuntu0.2
  • Updated glycin-thumbnailers from version 2.1.1+ds-0ubuntu1 to 2.1.5+ds-0ubuntu0.2
  • Updated libcares2 from version 1.34.6-1 to 1.34.6-1ubuntu0.1
  • Updated libcurl3t64-gnutls from version 8.18.0-1ubuntu2.5 to 8.18.0-1ubuntu2.7
  • Updated libcurl4t64 from version 8.18.0-1ubuntu2.5 to 8.18.0-1ubuntu2.7
  • Updated libevent-2.1-7t64 from version 2.1.12-stable-10ubuntu0.1 to 2.1.12-stable-10ubuntu0.2
  • Updated libevent-core-2.1-7t64 from version 2.1.12-stable-10ubuntu0.1 to 2.1.12-stable-10ubuntu0.2
  • Updated libevent-extra-2.1-7t64 from version 2.1.12-stable-10ubuntu0.1 to 2.1.12-stable-10ubuntu0.2
  • Updated libevent-openssl-2.1-7t64 from version 2.1.12-stable-10ubuntu0.1 to 2.1.12-stable-10ubuntu0.2
  • Updated libevent-pthreads-2.1-7t64 from version 2.1.12-stable-10ubuntu0.1 to 2.1.12-stable-10ubuntu0.2
  • Updated libexpat1 from version 2.7.4-1 to 2.7.4-1ubuntu0.2
  • Updated libfreetype6 from version 2.14.2+dfsg-1ubuntu0.1 to 2.14.2+dfsg-1ubuntu0.2
  • Updated libglib2.0-0t64 from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libglycin-2-0 from version 2.1.1+ds-0ubuntu1 to 2.1.5+ds-0ubuntu0.2
  • Updated libgs-common from version 10.06.0~dfsg-3ubuntu1 to 10.06.0~dfsg-3ubuntu1.1
  • Updated libgs10 from version 10.06.0~dfsg-3ubuntu1 to 10.06.0~dfsg-3ubuntu1.1
  • Updated libgs10-common from version 10.06.0~dfsg-3ubuntu1 to 10.06.0~dfsg-3ubuntu1.1
  • Updated libheif-plugin-aomdec from version 1.21.2-3ubuntu0.5 to 1.21.2-3ubuntu0.6
  • Updated libheif-plugin-libde265 from version 1.21.2-3ubuntu0.5 to 1.21.2-3ubuntu0.6
  • Updated libheif1 from version 1.21.2-3ubuntu0.5 to 1.21.2-3ubuntu0.6
  • Updated libmp3lame0 from version 3.101~svn6525+dfsg-2 to 3.101~svn6525+dfsg-2ubuntu0.1
  • Updated libpoppler-glib8t64 from version 26.01.0-2ubuntu0.1 to 26.01.0-2ubuntu0.2
  • Updated libpoppler156 from version 26.01.0-2ubuntu0.1 to 26.01.0-2ubuntu0.2
  • Updated librsvg2-2 from version 2.61.3+dfsg-3 to 2.61.3+dfsg-3ubuntu0.1
  • Updated librsvg2-common from version 2.61.3+dfsg-3 to 2.61.3+dfsg-3ubuntu0.1
  • Updated libssl3t64 from version 3.5.5-1ubuntu3.5 to 3.5.5-1ubuntu3.7
  • Updated libxml2-16 from version 2.15.2+dfsg-0.1ubuntu0.1 to 2.15.2+dfsg-0.1ubuntu0.2
  • Updated libxpm4 from version 1:3.5.17-1ubuntu0.26.04.1 to 1:3.5.17-1ubuntu0.26.04.2
  • Updated openssh-client from version 1:10.2p1-2ubuntu3.6 to 1:10.2p1-2ubuntu3.7
  • Updated openssh-server from version 1:10.2p1-2ubuntu3.6 to 1:10.2p1-2ubuntu3.7
  • Updated openssh-sftp-server from version 1:10.2p1-2ubuntu3.6 to 1:10.2p1-2ubuntu3.7
  • Updated openssl from version 3.5.5-1ubuntu3.5 to 3.5.5-1ubuntu3.7
  • Updated openssl-provider-legacy from version 3.5.5-1ubuntu3.5 to 3.5.5-1ubuntu3.7
  • Updated poppler-utils from version 26.01.0-2ubuntu0.1 to 26.01.0-2ubuntu0.2
  • Updated rust-coreutils from version 0.8.0-0ubuntu3 to 0.10.0-1ubuntu2~26.04.1

Updates to packages available at build time only

  • Updated girepository-tools from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libcurl4-openssl-dev from version 8.18.0-1ubuntu2.5 to 8.18.0-1ubuntu2.7
  • Updated libevent-dev from version 2.1.12-stable-10ubuntu0.1 to 2.1.12-stable-10ubuntu0.2
  • Updated libexpat1-dev from version 2.7.4-1 to 2.7.4-1ubuntu0.2
  • Updated libfreetype-dev from version 2.14.2+dfsg-1ubuntu0.1 to 2.14.2+dfsg-1ubuntu0.2
  • Updated libgio-2.0-dev from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libgio-2.0-dev-bin from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libgirepository-2.0-0 from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libglib2.0-bin from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libglib2.0-data from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libglib2.0-dev from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libglib2.0-dev-bin from version 2.88.0-1 to 2.88.0-1ubuntu0.1
  • Updated libheif-dev from version 1.21.2-3ubuntu0.5 to 1.21.2-3ubuntu0.6
  • Updated libssl-dev from version 3.5.5-1ubuntu3.5 to 3.5.5-1ubuntu3.7
  • Updated libunbound8 from version 1.24.2-1ubuntu2.2 to 1.24.2-1ubuntu2.3
  • Updated libxml2-dev from version 2.15.2+dfsg-0.1ubuntu0.1 to 2.15.2+dfsg-0.1ubuntu0.2
  • Updated libxpm-dev from version 1:3.5.17-1ubuntu0.26.04.1 to 1:3.5.17-1ubuntu0.26.04.2
  • Updated linux-libc-dev from version 7.0.0-31.31 to 7.0.0-38.38