Heroku-22 and Heroku-24 stacks updated

Change effective on 22 July 2025

We updated the heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-22

• Updated dirmngr from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated ghostscript from version 9.55.0~dfsg1-0ubuntu5.11 to 9.55.0~dfsg1-0ubuntu5.12
• Updated git from version 1:2.34.1-1ubuntu1.12 to 1:2.34.1-1ubuntu1.15
• Updated git-man from version 1:2.34.1-1ubuntu1.12 to 1:2.34.1-1ubuntu1.15
• Updated gnupg from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gnupg-l10n from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gnupg-utils from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gpg from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gpg-agent from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gpg-wks-client from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gpg-wks-server from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gpgconf from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gpgsm from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated gpgv from version 2.2.27-3ubuntu2.3 to 2.2.27-3ubuntu2.4
• Updated jq from version 1.6-2.1ubuntu3 to 1.6-2.1ubuntu3.1
• Updated libdjvulibre-text from version 3.5.28-2build2 to 3.5.28-2ubuntu0.22.04.1
• Updated libdjvulibre21 from version 3.5.28-2build2 to 3.5.28-2ubuntu0.22.04.1
• Updated libgnutls-openssl27 from version 3.7.3-4ubuntu1.6 to 3.7.3-4ubuntu1.7
• Updated libgnutls30 from version 3.7.3-4ubuntu1.6 to 3.7.3-4ubuntu1.7
• Updated libgnutlsxx28 from version 3.7.3-4ubuntu1.6 to 3.7.3-4ubuntu1.7
• Updated libgs9 from version 9.55.0~dfsg1-0ubuntu5.11 to 9.55.0~dfsg1-0ubuntu5.12
• Updated libgs9-common from version 9.55.0~dfsg1-0ubuntu5.11 to 9.55.0~dfsg1-0ubuntu5.12
• Updated libjq1 from version 1.6-2.1ubuntu3 to 1.6-2.1ubuntu3.1
• Updated libmysqlclient21 from version 8.0.42-0ubuntu0.22.04.1 to 8.0.42-0ubuntu0.22.04.2
• Updated libssh-4 from version 0.9.6-2ubuntu0.22.04.3 to 0.9.6-2ubuntu0.22.04.4
• Updated linux-libc-dev from version 5.15.0-143.153 to 5.15.0-144.157
• Updated postgresql-client-common from version 278.pgdg22.04+1 to 281.pgdg22.04+1

Updates to packages available at build time only

• Updated libdjvulibre-dev from version 3.5.28-2build2 to 3.5.28-2ubuntu0.22.04.1
• Updated libgnutls-dane0 from version 3.7.3-4ubuntu1.6 to 3.7.3-4ubuntu1.7
• Updated libgnutls28-dev from version 3.7.3-4ubuntu1.6 to 3.7.3-4ubuntu1.7
• Updated libgs-dev from version 9.55.0~dfsg1-0ubuntu5.11 to 9.55.0~dfsg1-0ubuntu5.12
• Updated libmysqlclient-dev from version 8.0.42-0ubuntu0.22.04.1 to 8.0.42-0ubuntu0.22.04.2

Stack: heroku-24

• Updated dirmngr from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated ghostscript from version 10.02.1~dfsg1-0ubuntu7.6 to 10.02.1~dfsg1-0ubuntu7.7
• Updated gnupg from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated gnupg-utils from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated gpg from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated gpg-agent from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated gpgconf from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated gpgsm from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated gpgv from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated jq from version 1.7.1-3build1 to 1.7.1-3ubuntu0.24.04.1
• Updated keyboxd from version 2.4.4-2ubuntu17.2 to 2.4.4-2ubuntu17.3
• Updated libc-bin from version 2.39-0ubuntu8.4 to 2.39-0ubuntu8.5
• Updated libc6 from version 2.39-0ubuntu8.4 to 2.39-0ubuntu8.5
• Updated libdjvulibre-text from version 3.5.28-2build4 to 3.5.28-2ubuntu0.24.04.1
• Updated libdjvulibre21 from version 3.5.28-2build4 to 3.5.28-2ubuntu0.24.04.1
• Updated libgnutls-openssl27t64 from version 3.8.3-1.1ubuntu3.3 to 3.8.3-1.1ubuntu3.4
• Updated libgnutls30t64 from version 3.8.3-1.1ubuntu3.3 to 3.8.3-1.1ubuntu3.4
• Updated libgs-common from version 10.02.1~dfsg1-0ubuntu7.6 to 10.02.1~dfsg1-0ubuntu7.7
• Updated libgs10 from version 10.02.1~dfsg1-0ubuntu7.6 to 10.02.1~dfsg1-0ubuntu7.7
• Updated libgs10-common from version 10.02.1~dfsg1-0ubuntu7.6 to 10.02.1~dfsg1-0ubuntu7.7
• Updated libjq1 from version 1.7.1-3build1 to 1.7.1-3ubuntu0.24.04.1
• Updated libjxl0.7 from version 0.7.0-10.2ubuntu6 to 0.7.0-10.2ubuntu6.1
• Updated libmysqlclient21 from version 8.0.42-0ubuntu0.24.04.1 to 8.0.42-0ubuntu0.24.04.2
• Updated libssh-4 from version 0.10.6-2build2 to 0.10.6-2ubuntu0.1
• Updated libsystemd0 from version 255.4-1ubuntu8.8 to 255.4-1ubuntu8.10
• Updated libudev1 from version 255.4-1ubuntu8.8 to 255.4-1ubuntu8.10
• Updated locales from version 2.39-0ubuntu8.4 to 2.39-0ubuntu8.5
• Updated postgresql-client-common from version 278.pgdg24.04+1 to 281.pgdg24.04+1

Updates to packages available at build time only

• Updated git from version 1:2.43.0-1ubuntu7.2 to 1:2.43.0-1ubuntu7.3
• Updated git-man from version 1:2.43.0-1ubuntu7.2 to 1:2.43.0-1ubuntu7.3
• Updated libc-dev-bin from version 2.39-0ubuntu8.4 to 2.39-0ubuntu8.5
• Updated libc6-dev from version 2.39-0ubuntu8.4 to 2.39-0ubuntu8.5
• Updated libdjvulibre-dev from version 3.5.28-2build4 to 3.5.28-2ubuntu0.24.04.1
• Updated libgnutls-dane0t64 from version 3.8.3-1.1ubuntu3.3 to 3.8.3-1.1ubuntu3.4
• Updated libgnutls28-dev from version 3.8.3-1.1ubuntu3.3 to 3.8.3-1.1ubuntu3.4
• Updated libmysqlclient-dev from version 8.0.42-0ubuntu0.24.04.1 to 8.0.42-0ubuntu0.24.04.2
• Updated linux-libc-dev from version 6.8.0-63.66 to 6.8.0-64.67