Heroku-22 and Heroku-24 stacks updated

Change effective on 02 June 2025

We updated the heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-22

  • Updated apt from version 2.4.13 to 2.4.14
  • Updated apt-transport-https from version 2.4.13 to 2.4.14
  • Updated apt-utils from version 2.4.13 to 2.4.14
  • Updated libapt-pkg6.0 from version 2.4.13 to 2.4.14
  • Updated libc-bin from version 2.35-0ubuntu3.9 to 2.35-0ubuntu3.10
  • Updated libc-dev-bin from version 2.35-0ubuntu3.9 to 2.35-0ubuntu3.10
  • Updated libc6 from version 2.35-0ubuntu3.9 to 2.35-0ubuntu3.10
  • Updated libc6-dev from version 2.35-0ubuntu3.9 to 2.35-0ubuntu3.10
  • Updated libgssapi-krb5-2 from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated libk5crypto3 from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated libkrb5-3 from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated libkrb5support0 from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated linux-libc-dev from version 5.15.0-140.150 to 5.15.0-141.151
  • Updated locales from version 2.35-0ubuntu3.9 to 2.35-0ubuntu3.10
  • Updated tzdata from version 2025b-0ubuntu0.22.04 to 2025b-0ubuntu0.22.04.1

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated libapt-pkg-dev from version 2.4.13 to 2.4.14
  • Updated libgssrpc4 from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated libkadm5clnt-mit12 from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated libkadm5srv-mit12 from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated libkdb5-10 from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7
  • Updated libkrb5-dev from version 1.19.2-2ubuntu0.6 to 1.19.2-2ubuntu0.7

Stack: heroku-24

  • Updated apt from version 2.7.14build2 to 2.8.3
  • Updated libapt-pkg6.0t64 from version 2.7.14build2 to 2.8.3
  • Updated libgssapi-krb5-2 from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated libk5crypto3 from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated libkrb5-3 from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated libkrb5support0 from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated tzdata from version 2025b-0ubuntu0.24.04 to 2025b-0ubuntu0.24.04.1

Updates to packages available at build time only

  • Updated krb5-multidev from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated libgssrpc4t64 from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated libkadm5clnt-mit12 from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated libkadm5srv-mit12 from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated libkdb5-10t64 from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated libkrb5-dev from version 1.20.1-6ubuntu2.5 to 1.20.1-6ubuntu2.6
  • Updated python3-pkg-resources from version 68.1.2-2ubuntu1.1 to 68.1.2-2ubuntu1.2
  • Updated python3-setuptools from version 68.1.2-2ubuntu1.1 to 68.1.2-2ubuntu1.2