Heroku-20, Heroku-22 and Heroku-24 stacks updated

Change effective on 10 April 2025

We updated the heroku-20, heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

The Heroku-20 stack is deprecated and will reach end-of-life on April 30th, 2025. Upgrade to a newer stack as soon as possible. See the Heroku-20 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-20

  • Updated dirmngr from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated ghostscript from version 9.50~dfsg-5ubuntu4.14 to 9.50~dfsg-5ubuntu4.15
  • Updated gnupg from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gnupg-l10n from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gnupg-utils from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gpg from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gpg-agent from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gpg-wks-client from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gpg-wks-server from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gpgconf from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gpgsm from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated gpgv from version 2.2.19-3ubuntu2.2 to 2.2.19-3ubuntu2.4
  • Updated libaom0 from version 1.0.0.errata1-3+deb11u1build0.20.04.1 to 1.0.0.errata1-3+deb11u1ubuntu0.1
  • Updated libfreetype6 from version 2.10.1-2ubuntu0.3 to 2.10.1-2ubuntu0.4
  • Updated libgs9 from version 9.50~dfsg-5ubuntu4.14 to 9.50~dfsg-5ubuntu4.15
  • Updated libgs9-common from version 9.50~dfsg-5ubuntu4.14 to 9.50~dfsg-5ubuntu4.15
  • Updated libpython3.8-minimal from version 3.8.10-0ubuntu1~20.04.15 to 3.8.10-0ubuntu1~20.04.18
  • Updated libpython3.8-stdlib from version 3.8.10-0ubuntu1~20.04.15 to 3.8.10-0ubuntu1~20.04.18
  • Updated libruby2.7 from version 2.7.0-5ubuntu1.17 to 2.7.0-5ubuntu1.18
  • Updated libxslt1.1 from version 1.1.34-4ubuntu0.20.04.1 to 1.1.34-4ubuntu0.20.04.3
  • Updated linux-libc-dev from version 5.4.0-208.228 to 5.4.0-212.232
  • Updated python3.8 from version 3.8.10-0ubuntu1~20.04.15 to 3.8.10-0ubuntu1~20.04.18
  • Updated python3.8-minimal from version 3.8.10-0ubuntu1~20.04.15 to 3.8.10-0ubuntu1~20.04.18
  • Updated ruby2.7 from version 2.7.0-5ubuntu1.17 to 2.7.0-5ubuntu1.18
  • Updated tzdata from version 2024b-0ubuntu0.20.04.1 to 2025b-0ubuntu0.20.04

Updates to packages available at build time only

  • Updated libfreetype-dev from version 2.10.1-2ubuntu0.3 to 2.10.1-2ubuntu0.4
  • Updated libfreetype6-dev from version 2.10.1-2ubuntu0.3 to 2.10.1-2ubuntu0.4
  • Updated libgs-dev from version 9.50~dfsg-5ubuntu4.14 to 9.50~dfsg-5ubuntu4.15
  • Updated libpython3.8 from version 3.8.10-0ubuntu1~20.04.15 to 3.8.10-0ubuntu1~20.04.18
  • Updated libpython3.8-dev from version 3.8.10-0ubuntu1~20.04.15 to 3.8.10-0ubuntu1~20.04.18
  • Updated libxslt1-dev from version 1.1.34-4ubuntu0.20.04.1 to 1.1.34-4ubuntu0.20.04.3
  • Updated python3.8-dev from version 3.8.10-0ubuntu1~20.04.15 to 3.8.10-0ubuntu1~20.04.18
  • Updated ruby2.7-dev from version 2.7.0-5ubuntu1.17 to 2.7.0-5ubuntu1.18

Stack: heroku-22

  • Updated dirmngr from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated ghostscript from version 9.55.0~dfsg1-0ubuntu5.10 to 9.55.0~dfsg1-0ubuntu5.11
  • Updated gnupg from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gnupg-l10n from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gnupg-utils from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gpg from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gpg-agent from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gpg-wks-client from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gpg-wks-server from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gpgconf from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gpgsm from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated gpgv from version 2.2.27-3ubuntu2.1 to 2.2.27-3ubuntu2.3
  • Updated libaom3 from version 3.3.0-1 to 3.3.0-1ubuntu0.1
  • Updated libelf1 from version 0.186-1build1 to 0.186-1ubuntu0.1
  • Updated libfreetype6 from version 2.11.1+dfsg-1ubuntu0.2 to 2.11.1+dfsg-1ubuntu0.3
  • Updated libgs9 from version 9.55.0~dfsg1-0ubuntu5.10 to 9.55.0~dfsg1-0ubuntu5.11
  • Updated libgs9-common from version 9.55.0~dfsg1-0ubuntu5.10 to 9.55.0~dfsg1-0ubuntu5.11
  • Updated libsystemd0 from version 249.11-0ubuntu3.12 to 249.11-0ubuntu3.15
  • Updated libudev1 from version 249.11-0ubuntu3.12 to 249.11-0ubuntu3.15
  • Updated libxslt1.1 from version 1.1.34-4ubuntu0.22.04.1 to 1.1.34-4ubuntu0.22.04.3
  • Updated linux-libc-dev from version 5.15.0-134.145 to 5.15.0-136.147
  • Updated systemd from version 249.11-0ubuntu3.12 to 249.11-0ubuntu3.15
  • Updated tzdata from version 2024b-0ubuntu0.22.04.1 to 2025b-0ubuntu0.22.04

Updates to packages available at build time only

  • Updated libaom-dev from version 3.3.0-1 to 3.3.0-1ubuntu0.1
  • Updated libfreetype-dev from version 2.11.1+dfsg-1ubuntu0.2 to 2.11.1+dfsg-1ubuntu0.3
  • Updated libfreetype6-dev from version 2.11.1+dfsg-1ubuntu0.2 to 2.11.1+dfsg-1ubuntu0.3
  • Updated libgs-dev from version 9.55.0~dfsg1-0ubuntu5.10 to 9.55.0~dfsg1-0ubuntu5.11
  • Updated libsystemd-dev from version 249.11-0ubuntu3.12 to 249.11-0ubuntu3.15
  • Updated libudev-dev from version 249.11-0ubuntu3.12 to 249.11-0ubuntu3.15
  • Updated libxslt1-dev from version 1.1.34-4ubuntu0.22.04.1 to 1.1.34-4ubuntu0.22.04.3

Stack: heroku-24

  • Updated dirmngr from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated ghostscript from version 10.02.1~dfsg1-0ubuntu7.4 to 10.02.1~dfsg1-0ubuntu7.5
  • Updated gnupg from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated gnupg-utils from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated gpg from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated gpg-agent from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated gpgconf from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated gpgsm from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated gpgv from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated keyboxd from version 2.4.4-2ubuntu17 to 2.4.4-2ubuntu17.2
  • Updated libelf1t64 from version 0.190-1.1build4.1 to 0.190-1.1ubuntu0.1
  • Updated libgs-common from version 10.02.1~dfsg1-0ubuntu7.4 to 10.02.1~dfsg1-0ubuntu7.5
  • Updated libgs10 from version 10.02.1~dfsg1-0ubuntu7.4 to 10.02.1~dfsg1-0ubuntu7.5
  • Updated libgs10-common from version 10.02.1~dfsg1-0ubuntu7.4 to 10.02.1~dfsg1-0ubuntu7.5
  • Updated liblzma5 from version 5.6.1+really5.4.5-1build0.1 to 5.6.1+really5.4.5-1ubuntu0.2
  • Updated libsystemd0 from version 255.4-1ubuntu8.5 to 255.4-1ubuntu8.6
  • Updated libudev1 from version 255.4-1ubuntu8.5 to 255.4-1ubuntu8.6
  • Updated libxslt1.1 from version 1.1.39-0exp1build1 to 1.1.39-0exp1ubuntu0.24.04.2
  • Updated openssh-client from version 1:9.6p1-3ubuntu13.8 to 1:9.6p1-3ubuntu13.9
  • Updated openssh-server from version 1:9.6p1-3ubuntu13.8 to 1:9.6p1-3ubuntu13.9
  • Updated openssh-sftp-server from version 1:9.6p1-3ubuntu13.8 to 1:9.6p1-3ubuntu13.9
  • Updated tzdata from version 2024b-0ubuntu0.24.04.1 to 2025b-0ubuntu0.24.04
  • Updated xz-utils from version 5.6.1+really5.4.5-1build0.1 to 5.6.1+really5.4.5-1ubuntu0.2

Updates to packages available at build time only

  • Updated liblzma-dev from version 5.6.1+really5.4.5-1build0.1 to 5.6.1+really5.4.5-1ubuntu0.2
  • Updated libunbound8 from version 1.19.2-1ubuntu3.3 to 1.19.2-1ubuntu3.4
  • Updated libxslt1-dev from version 1.1.39-0exp1build1 to 1.1.39-0exp1ubuntu0.24.04.2
  • Updated linux-libc-dev from version 6.8.0-55.57 to 6.8.0-57.59