Heroku-22, Heroku-24 and Heroku-26 stacks updated

Change effective on 20 October 2026

We have updated the heroku-22, heroku-24 and heroku-26 stacks to pick up security and bug fixes in upstream packages. The new base images for each stack will roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to receive these changes. For Cedar-generation apps, each time a dyno starts, the slug is overlaid on top of the most recent base image. For Fir-generation apps, the built image is rebased on top of the most recent base image.

If your app uses Heroku’s container stack, you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the package versions available in each stack’s base image.

The Heroku-22 stack is deprecated and will reach end-of-life on April 30th, 2027. Upgrade to a newer stack as soon as possible. See the Heroku-22 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-22

  • Updated bind9-dnsutils from version 1:9.18.39-0ubuntu0.22.04.6 to 1:9.18.39-0ubuntu0.22.04.7
  • Updated bind9-host from version 1:9.18.39-0ubuntu0.22.04.6 to 1:9.18.39-0ubuntu0.22.04.7
  • Updated bind9-libs from version 1:9.18.39-0ubuntu0.22.04.6 to 1:9.18.39-0ubuntu0.22.04.7
  • Updated curl from version 7.81.0-1ubuntu1.29 to 7.81.0-1ubuntu1.30
  • Updated dnsutils from version 1:9.18.39-0ubuntu0.22.04.6 to 1:9.18.39-0ubuntu0.22.04.7
  • Updated git from version 1:2.34.1-1ubuntu1.17 to 1:2.34.1-1ubuntu1.18
  • Updated git-man from version 1:2.34.1-1ubuntu1.17 to 1:2.34.1-1ubuntu1.18
  • Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.29 to 7.81.0-1ubuntu1.30
  • Updated libcurl4 from version 7.81.0-1ubuntu1.29 to 7.81.0-1ubuntu1.30
  • Updated libpng16-16 from version 1.6.37-3ubuntu0.6 to 1.6.37-3ubuntu0.7
  • Updated libsystemd0 from version 249.11-0ubuntu3.22 to 249.11-0ubuntu3.23
  • Updated libudev1 from version 249.11-0ubuntu3.22 to 249.11-0ubuntu3.23
  • Updated libx11-6 from version 2:1.7.5-1ubuntu0.3 to 2:1.7.5-1ubuntu0.4
  • Updated libx11-data from version 2:1.7.5-1ubuntu0.3 to 2:1.7.5-1ubuntu0.4
  • Updated libxml2 from version 2.9.13+dfsg-1ubuntu0.13 to 2.9.13+dfsg-1ubuntu0.14
  • Updated openssh-client from version 1:8.9p1-3ubuntu0.17 to 1:8.9p1-3ubuntu0.18
  • Updated openssh-server from version 1:8.9p1-3ubuntu0.17 to 1:8.9p1-3ubuntu0.18
  • Updated openssh-sftp-server from version 1:8.9p1-3ubuntu0.17 to 1:8.9p1-3ubuntu0.18
  • Updated systemd from version 249.11-0ubuntu3.22 to 249.11-0ubuntu3.23
  • Updated tzdata from version 2026c-0ubuntu0.22.04.1 to 2026e-0ubuntu0.22.04.1

Updates to packages available at build time only

  • Updated libarchive13 from version 3.6.0-1ubuntu1.8 to 3.6.0-1ubuntu1.9
  • Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.29 to 7.81.0-1ubuntu1.30
  • Updated libpng-dev from version 1.6.37-3ubuntu0.6 to 1.6.37-3ubuntu0.7
  • Updated libsystemd-dev from version 249.11-0ubuntu3.22 to 249.11-0ubuntu3.23
  • Updated libudev-dev from version 249.11-0ubuntu3.22 to 249.11-0ubuntu3.23
  • Updated libx11-dev from version 2:1.7.5-1ubuntu0.3 to 2:1.7.5-1ubuntu0.4
  • Updated libxml2-dev from version 2.9.13+dfsg-1ubuntu0.13 to 2.9.13+dfsg-1ubuntu0.14
  • Updated python3-urllib3 from version 1.26.5-1~exp1ubuntu0.7 to 1.26.5-1~exp1ubuntu0.8

Stack: heroku-24

  • Updated bind9-dnsutils from version 1:9.18.39-0ubuntu0.24.04.7 to 1:9.18.39-0ubuntu0.24.04.8
  • Updated bind9-host from version 1:9.18.39-0ubuntu0.24.04.7 to 1:9.18.39-0ubuntu0.24.04.8
  • Updated bind9-libs from version 1:9.18.39-0ubuntu0.24.04.7 to 1:9.18.39-0ubuntu0.24.04.8
  • Updated curl from version 8.5.0-2ubuntu10.15 to 8.5.0-2ubuntu10.16
  • Updated libarchive13t64 from version 3.7.2-2ubuntu0.8 to 3.7.2-2ubuntu0.9
  • Updated libcurl3t64-gnutls from version 8.5.0-2ubuntu10.15 to 8.5.0-2ubuntu10.16
  • Updated libcurl4t64 from version 8.5.0-2ubuntu10.15 to 8.5.0-2ubuntu10.16
  • Updated libde265-0 from version 1.0.15-1ubuntu0.1 to 1.0.15-1ubuntu0.2
  • Updated libpng16-16t64 from version 1.6.43-5ubuntu0.6 to 1.6.43-5ubuntu0.7
  • Updated libsystemd0 from version 255.4-1ubuntu8.17 to 255.4-1ubuntu8.18
  • Updated libudev1 from version 255.4-1ubuntu8.17 to 255.4-1ubuntu8.18
  • Updated libx11-6 from version 2:1.8.7-1build1 to 2:1.8.7-1ubuntu0.1
  • Updated libx11-data from version 2:1.8.7-1build1 to 2:1.8.7-1ubuntu0.1
  • Updated libxml2 from version 2.9.14+dfsg-1.3ubuntu3.9 to 2.9.14+dfsg-1.3ubuntu3.10
  • Updated openssh-client from version 1:9.6p1-3ubuntu13.19 to 1:9.6p1-3ubuntu13.20
  • Updated openssh-server from version 1:9.6p1-3ubuntu13.19 to 1:9.6p1-3ubuntu13.20
  • Updated openssh-sftp-server from version 1:9.6p1-3ubuntu13.19 to 1:9.6p1-3ubuntu13.20
  • Updated tzdata from version 2026c-0ubuntu0.24.04.1 to 2026e-0ubuntu0.24.04.1

Updates to packages available at build time only

  • Updated git from version 1:2.43.0-1ubuntu7.3 to 1:2.43.0-1ubuntu7.4
  • Updated git-man from version 1:2.43.0-1ubuntu7.3 to 1:2.43.0-1ubuntu7.4
  • Updated libcurl4-openssl-dev from version 8.5.0-2ubuntu10.15 to 8.5.0-2ubuntu10.16
  • Updated libde265-dev from version 1.0.15-1ubuntu0.1 to 1.0.15-1ubuntu0.2
  • Updated libpng-dev from version 1.6.43-5ubuntu0.6 to 1.6.43-5ubuntu0.7
  • Updated libx11-dev from version 2:1.8.7-1build1 to 2:1.8.7-1ubuntu0.1
  • Updated libxml2-dev from version 2.9.14+dfsg-1.3ubuntu3.9 to 2.9.14+dfsg-1.3ubuntu3.10
  • Updated linux-libc-dev from version 6.8.0-146.146 to 6.8.0-147.147

Stack: heroku-26

  • Updated bind9-dnsutils from version 1:9.20.24-1ubuntu0.3 to 1:9.20.24-1ubuntu0.4
  • Updated bind9-host from version 1:9.20.24-1ubuntu0.3 to 1:9.20.24-1ubuntu0.4
  • Updated bind9-libs from version 1:9.20.24-1ubuntu0.3 to 1:9.20.24-1ubuntu0.4
  • Updated curl from version 8.18.0-1ubuntu2.7 to 8.18.0-1ubuntu2.8
  • Updated libarchive13t64 from version 3.8.5-1ubuntu2.2 to 3.8.5-1ubuntu2.3
  • Updated libcurl3t64-gnutls from version 8.18.0-1ubuntu2.7 to 8.18.0-1ubuntu2.8
  • Updated libcurl4t64 from version 8.18.0-1ubuntu2.7 to 8.18.0-1ubuntu2.8
  • Updated libpng16-16t64 from version 1.6.57-1 to 1.6.57-1ubuntu0.1
  • Updated libsystemd-shared from version 259.5-0ubuntu3.4 to 259.9-0ubuntu0.1
  • Updated libsystemd0 from version 259.5-0ubuntu3.4 to 259.9-0ubuntu0.1
  • Updated libudev1 from version 259.5-0ubuntu3.4 to 259.9-0ubuntu0.1
  • Updated libx11-6 from version 2:1.8.13-1 to 2:1.8.13-1ubuntu0.1
  • Updated libx11-data from version 2:1.8.13-1 to 2:1.8.13-1ubuntu0.1
  • Updated libxml2-16 from version 2.15.2+dfsg-0.1ubuntu0.2 to 2.15.2+dfsg-0.1ubuntu0.3
  • Updated openssh-client from version 1:10.2p1-2ubuntu3.7 to 1:10.2p1-2ubuntu3.8
  • Updated openssh-server from version 1:10.2p1-2ubuntu3.7 to 1:10.2p1-2ubuntu3.8
  • Updated openssh-sftp-server from version 1:10.2p1-2ubuntu3.7 to 1:10.2p1-2ubuntu3.8
  • Updated systemd from version 259.5-0ubuntu3.4 to 259.9-0ubuntu0.1
  • Updated tzdata from version 2026c-0ubuntu0.26.04.1 to 2026e-0ubuntu0.26.04.1

Updates to packages available at build time only

  • Updated git from version 1:2.53.0-1ubuntu1 to 1:2.53.0-1ubuntu1.1
  • Updated git-man from version 1:2.53.0-1ubuntu1 to 1:2.53.0-1ubuntu1.1
  • Updated libcurl4-openssl-dev from version 8.18.0-1ubuntu2.7 to 8.18.0-1ubuntu2.8
  • Updated libpng-dev from version 1.6.57-1 to 1.6.57-1ubuntu0.1
  • Updated libx11-dev from version 2:1.8.13-1 to 2:1.8.13-1ubuntu0.1
  • Updated libxml2-dev from version 2.15.2+dfsg-0.1ubuntu0.2 to 2.15.2+dfsg-0.1ubuntu0.3