Heroku-20, Heroku-22 and Heroku-24 stacks updated

Change effective on 24 February 2025

We updated the heroku-20, heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

The Heroku-20 stack is deprecated and will reach end-of-life on April 30th, 2025. Upgrade to a newer stack as soon as possible. See the Heroku-20 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-20

  • Removed libio-pty-perl
  • Removed libipc-run-perl
  • Updated libc-bin from version 2.31-0ubuntu9.16 to 2.31-0ubuntu9.17
  • Updated libc-dev-bin from version 2.31-0ubuntu9.16 to 2.31-0ubuntu9.17
  • Updated libc6 from version 2.31-0ubuntu9.16 to 2.31-0ubuntu9.17
  • Updated libc6-dev from version 2.31-0ubuntu9.16 to 2.31-0ubuntu9.17
  • Updated libgnutls-openssl27 from version 3.6.13-2ubuntu1.11 to 3.6.13-2ubuntu1.12
  • Updated libgnutls30 from version 3.6.13-2ubuntu1.11 to 3.6.13-2ubuntu1.12
  • Updated libgnutlsxx28 from version 3.6.13-2ubuntu1.11 to 3.6.13-2ubuntu1.12
  • Updated libgssapi-krb5-2 from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libk5crypto3 from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libkrb5-3 from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libkrb5support0 from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libpq5 from version 17.2-1.pgdg20.04+1 to 17.4-1.pgdg20.04+2
  • Updated libpython3.8-minimal from version 3.8.10-0ubuntu1~20.04.14 to 3.8.10-0ubuntu1~20.04.15
  • Updated libpython3.8-stdlib from version 3.8.10-0ubuntu1~20.04.14 to 3.8.10-0ubuntu1~20.04.15
  • Updated libruby2.7 from version 2.7.0-5ubuntu1.15 to 2.7.0-5ubuntu1.17
  • Updated libssl1.1 from version 1.1.1f-1ubuntu2.23 to 1.1.1f-1ubuntu2.24
  • Updated libtasn1-6 from version 4.16.0-2 to 4.16.0-2ubuntu0.1
  • Updated locales from version 2.31-0ubuntu9.16 to 2.31-0ubuntu9.17
  • Updated openssh-client from version 1:8.2p1-4ubuntu0.11 to 1:8.2p1-4ubuntu0.12
  • Updated openssh-server from version 1:8.2p1-4ubuntu0.11 to 1:8.2p1-4ubuntu0.12
  • Updated openssh-sftp-server from version 1:8.2p1-4ubuntu0.11 to 1:8.2p1-4ubuntu0.12
  • Updated openssl from version 1.1.1f-1ubuntu2.23 to 1.1.1f-1ubuntu2.24
  • Updated postgresql-client-16 from version 16.6-1.pgdg20.04+1 to 16.8-1.pgdg20.04+1
  • Updated postgresql-client-common from version 267.pgdg20.04+1 to 274.pgdg20.04+1
  • Updated python3.8 from version 3.8.10-0ubuntu1~20.04.14 to 3.8.10-0ubuntu1~20.04.15
  • Updated python3.8-minimal from version 3.8.10-0ubuntu1~20.04.14 to 3.8.10-0ubuntu1~20.04.15
  • Updated ruby2.7 from version 2.7.0-5ubuntu1.15 to 2.7.0-5ubuntu1.17
  • Updated tzdata from version 2024b-0ubuntu0.20.04 to 2024b-0ubuntu0.20.04.1

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libc6-i386 from version 2.31-0ubuntu9.16 to 2.31-0ubuntu9.17
  • Updated libgnutls-dane0 from version 3.6.13-2ubuntu1.11 to 3.6.13-2ubuntu1.12
  • Updated libgnutls28-dev from version 3.6.13-2ubuntu1.11 to 3.6.13-2ubuntu1.12
  • Updated libgssrpc4 from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libkadm5clnt-mit11 from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libkadm5srv-mit11 from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libkdb5-9 from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libkrb5-dev from version 1.17-6ubuntu4.7 to 1.17-6ubuntu4.8
  • Updated libpq-dev from version 17.2-1.pgdg20.04+1 to 17.4-1.pgdg20.04+2
  • Updated libpython3.8 from version 3.8.10-0ubuntu1~20.04.14 to 3.8.10-0ubuntu1~20.04.15
  • Updated libpython3.8-dev from version 3.8.10-0ubuntu1~20.04.14 to 3.8.10-0ubuntu1~20.04.15
  • Updated libssl-dev from version 1.1.1f-1ubuntu2.23 to 1.1.1f-1ubuntu2.24
  • Updated libtasn1-6-dev from version 4.16.0-2 to 4.16.0-2ubuntu0.1
  • Updated postgresql-common from version 267.pgdg20.04+1 to 274.pgdg20.04+1
  • Updated postgresql-server-dev-16 from version 16.6-1.pgdg20.04+1 to 16.8-1.pgdg20.04+1
  • Updated python3.8-dev from version 3.8.10-0ubuntu1~20.04.14 to 3.8.10-0ubuntu1~20.04.15
  • Updated ruby2.7-dev from version 2.7.0-5ubuntu1.15 to 2.7.0-5ubuntu1.17
  • Added postgresql-common-dev version 274.pgdg20.04+1

Stack: heroku-22

  • Removed libio-pty-perl
  • Removed libipc-run-perl
  • Updated libc-bin from version 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9
  • Updated libc-dev-bin from version 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9
  • Updated libc6 from version 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9
  • Updated libc6-dev from version 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9
  • Updated libgnutls-openssl27 from version 3.7.3-4ubuntu1.5 to 3.7.3-4ubuntu1.6
  • Updated libgnutls30 from version 3.7.3-4ubuntu1.5 to 3.7.3-4ubuntu1.6
  • Updated libgnutlsxx28 from version 3.7.3-4ubuntu1.5 to 3.7.3-4ubuntu1.6
  • Updated libgssapi-krb5-2 from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libk5crypto3 from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libkrb5-3 from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libkrb5support0 from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libldap-2.5-0 from version 2.5.18+dfsg-0ubuntu0.22.04.2 to 2.5.18+dfsg-0ubuntu0.22.04.3
  • Updated libpq5 from version 17.2-1.pgdg22.04+1 to 17.4-1.pgdg22.04+2
  • Updated libpython3.10-minimal from version 3.10.12-1~22.04.8 to 3.10.12-1~22.04.9
  • Updated libpython3.10-stdlib from version 3.10.12-1~22.04.8 to 3.10.12-1~22.04.9
  • Updated libseccomp2 from version 2.5.3-2ubuntu2 to 2.5.3-2ubuntu3~22.04.1
  • Updated libssl3 from version 3.0.2-0ubuntu1.18 to 3.0.2-0ubuntu1.19
  • Updated libtasn1-6 from version 4.18.0-4build1 to 4.18.0-4ubuntu0.1
  • Updated linux-libc-dev from version 5.15.0-131.141 to 5.15.0-133.144
  • Updated locales from version 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9
  • Updated openssh-client from version 1:8.9p1-3ubuntu0.10 to 1:8.9p1-3ubuntu0.11
  • Updated openssh-server from version 1:8.9p1-3ubuntu0.10 to 1:8.9p1-3ubuntu0.11
  • Updated openssh-sftp-server from version 1:8.9p1-3ubuntu0.10 to 1:8.9p1-3ubuntu0.11
  • Updated openssl from version 3.0.2-0ubuntu1.18 to 3.0.2-0ubuntu1.19
  • Updated postgresql-client-16 from version 16.6-1.pgdg22.04+1 to 16.8-1.pgdg22.04+1
  • Updated postgresql-client-common from version 267.pgdg22.04+1 to 274.pgdg22.04+1
  • Updated python3.10 from version 3.10.12-1~22.04.8 to 3.10.12-1~22.04.9
  • Updated python3.10-minimal from version 3.10.12-1~22.04.8 to 3.10.12-1~22.04.9
  • Updated tzdata from version 2024b-0ubuntu0.22.04 to 2024b-0ubuntu0.22.04.1

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libgnutls-dane0 from version 3.7.3-4ubuntu1.5 to 3.7.3-4ubuntu1.6
  • Updated libgnutls28-dev from version 3.7.3-4ubuntu1.5 to 3.7.3-4ubuntu1.6
  • Updated libgssrpc4 from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libkadm5clnt-mit12 from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libkadm5srv-mit12 from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libkdb5-10 from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libkrb5-dev from version 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5
  • Updated libldap-dev from version 2.5.18+dfsg-0ubuntu0.22.04.2 to 2.5.18+dfsg-0ubuntu0.22.04.3
  • Updated libldap2-dev from version 2.5.18+dfsg-0ubuntu0.22.04.2 to 2.5.18+dfsg-0ubuntu0.22.04.3
  • Updated libpq-dev from version 17.2-1.pgdg22.04+1 to 17.4-1.pgdg22.04+2
  • Updated libpython3.10 from version 3.10.12-1~22.04.8 to 3.10.12-1~22.04.9
  • Updated libpython3.10-dev from version 3.10.12-1~22.04.8 to 3.10.12-1~22.04.9
  • Updated libseccomp-dev from version 2.5.3-2ubuntu2 to 2.5.3-2ubuntu3~22.04.1
  • Updated libssl-dev from version 3.0.2-0ubuntu1.18 to 3.0.2-0ubuntu1.19
  • Updated libtasn1-6-dev from version 4.18.0-4build1 to 4.18.0-4ubuntu0.1
  • Updated python3.10-dev from version 3.10.12-1~22.04.8 to 3.10.12-1~22.04.9

Stack: heroku-24

  • Removed libio-pty-perl
  • Removed libipc-run-perl
  • Updated base-files from version 13ubuntu10.1 to 13ubuntu10.2
  • Updated libc-bin from version 2.39-0ubuntu8.3 to 2.39-0ubuntu8.4
  • Updated libc6 from version 2.39-0ubuntu8.3 to 2.39-0ubuntu8.4
  • Updated libgnutls-openssl27t64 from version 3.8.3-1.1ubuntu3.2 to 3.8.3-1.1ubuntu3.3
  • Updated libgnutls30t64 from version 3.8.3-1.1ubuntu3.2 to 3.8.3-1.1ubuntu3.3
  • Updated libgssapi-krb5-2 from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libk5crypto3 from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libkrb5-3 from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libkrb5support0 from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libldap2 from version 2.6.7+dfsg-1~exp1ubuntu8.1 to 2.6.7+dfsg-1~exp1ubuntu8.2
  • Updated libpq5 from version 17.2-1.pgdg24.04+1 to 17.4-1.pgdg24.04+2
  • Updated libssl3t64 from version 3.0.13-0ubuntu3.4 to 3.0.13-0ubuntu3.5
  • Updated libtasn1-6 from version 4.19.0-3build1 to 4.19.0-3ubuntu0.24.04.1
  • Updated locales from version 2.39-0ubuntu8.3 to 2.39-0ubuntu8.4
  • Updated openssh-client from version 1:9.6p1-3ubuntu13.5 to 1:9.6p1-3ubuntu13.8
  • Updated openssh-server from version 1:9.6p1-3ubuntu13.5 to 1:9.6p1-3ubuntu13.8
  • Updated openssh-sftp-server from version 1:9.6p1-3ubuntu13.5 to 1:9.6p1-3ubuntu13.8
  • Updated openssl from version 3.0.13-0ubuntu3.4 to 3.0.13-0ubuntu3.5
  • Updated postgresql-client-16 from version 16.6-1.pgdg24.04+1 to 16.8-1.pgdg24.04+1
  • Updated postgresql-client-common from version 267.pgdg24.04+1 to 274.pgdg24.04+1
  • Updated tzdata from version 2024b-0ubuntu0.24.04 to 2024b-0ubuntu0.24.04.1
  • Updated zip from version 3.0-13ubuntu0.1 to 3.0-13ubuntu0.2

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libc-dev-bin from version 2.39-0ubuntu8.3 to 2.39-0ubuntu8.4
  • Updated libc6-dev from version 2.39-0ubuntu8.3 to 2.39-0ubuntu8.4
  • Updated libgnutls-dane0t64 from version 3.8.3-1.1ubuntu3.2 to 3.8.3-1.1ubuntu3.3
  • Updated libgnutls28-dev from version 3.8.3-1.1ubuntu3.2 to 3.8.3-1.1ubuntu3.3
  • Updated libgssrpc4t64 from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libkadm5clnt-mit12 from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libkadm5srv-mit12 from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libkdb5-10t64 from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libkrb5-dev from version 1.20.1-6ubuntu2.2 to 1.20.1-6ubuntu2.4
  • Updated libldap-dev from version 2.6.7+dfsg-1~exp1ubuntu8.1 to 2.6.7+dfsg-1~exp1ubuntu8.2
  • Updated libpq-dev from version 17.2-1.pgdg24.04+1 to 17.4-1.pgdg24.04+2
  • Updated libpython3.12-minimal from version 3.12.3-1ubuntu0.4 to 3.12.3-1ubuntu0.5
  • Updated libpython3.12-stdlib from version 3.12.3-1ubuntu0.4 to 3.12.3-1ubuntu0.5
  • Updated libssl-dev from version 3.0.13-0ubuntu3.4 to 3.0.13-0ubuntu3.5
  • Updated libtasn1-6-dev from version 4.19.0-3build1 to 4.19.0-3ubuntu0.24.04.1
  • Updated linux-libc-dev from version 6.8.0-52.53 to 6.8.0-53.55
  • Updated python3.12 from version 3.12.3-1ubuntu0.4 to 3.12.3-1ubuntu0.5
  • Updated python3.12-minimal from version 3.12.3-1ubuntu0.4 to 3.12.3-1ubuntu0.5