Heroku-22 and Heroku-24 stacks updated

Change effective on 24 March 2026

We updated the heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-22

• Updated bsdutils from version 1:2.37.2-4ubuntu3.4 to 1:2.37.2-4ubuntu3.5
• Updated coreutils from version 8.32-4.1ubuntu1.2 to 8.32-4.1ubuntu1.3
• Updated curl from version 7.81.0-1ubuntu1.22 to 7.81.0-1ubuntu1.23
• Updated libblkid1 from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5
• Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.22 to 7.81.0-1ubuntu1.23
• Updated libcurl4 from version 7.81.0-1ubuntu1.22 to 7.81.0-1ubuntu1.23
• Updated libmount1 from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5
• Updated libsmartcols1 from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5
• Updated libssh-4 from version 0.9.6-2ubuntu0.22.04.6 to 0.9.6-2ubuntu0.22.04.7
• Updated libtiff5 from version 4.3.0-6ubuntu0.12 to 4.3.0-6ubuntu0.13
• Updated libuuid1 from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5
• Updated linux-libc-dev from version 5.15.0-171.181 to 5.15.0-173.183
• Updated mount from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5
• Updated openssh-client from version 1:8.9p1-3ubuntu0.13 to 1:8.9p1-3ubuntu0.14
• Updated openssh-server from version 1:8.9p1-3ubuntu0.13 to 1:8.9p1-3ubuntu0.14
• Updated openssh-sftp-server from version 1:8.9p1-3ubuntu0.13 to 1:8.9p1-3ubuntu0.14
• Updated util-linux from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5

Updates to packages available at build time only

• Updated libblkid-dev from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5
• Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.22 to 7.81.0-1ubuntu1.23
• Updated libmount-dev from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5
• Updated libtiff-dev from version 4.3.0-6ubuntu0.12 to 4.3.0-6ubuntu0.13
• Updated libtiffxx5 from version 4.3.0-6ubuntu0.12 to 4.3.0-6ubuntu0.13
• Updated uuid-dev from version 2.37.2-4ubuntu3.4 to 2.37.2-4ubuntu3.5

Stack: heroku-24

• Updated binutils from version 2.42-4ubuntu2.8 to 2.42-4ubuntu2.10
• Updated binutils-aarch64-linux-gnu/binutils-x86-64-linux-gnu from version 2.42-4ubuntu2.8 to 2.42-4ubuntu2.10
• Updated binutils-common from version 2.42-4ubuntu2.8 to 2.42-4ubuntu2.10
• Updated bsdutils from version 1:2.39.3-9ubuntu6.4 to 1:2.39.3-9ubuntu6.5
• Updated coreutils from version 9.4-3ubuntu6.1 to 9.4-3ubuntu6.2
• Updated curl from version 8.5.0-2ubuntu10.7 to 8.5.0-2ubuntu10.8
• Updated libbinutils from version 2.42-4ubuntu2.8 to 2.42-4ubuntu2.10
• Updated libblkid1 from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5
• Updated libctf-nobfd0 from version 2.42-4ubuntu2.8 to 2.42-4ubuntu2.10
• Updated libctf0 from version 2.42-4ubuntu2.8 to 2.42-4ubuntu2.10
• Updated libcurl3t64-gnutls from version 8.5.0-2ubuntu10.7 to 8.5.0-2ubuntu10.8
• Updated libcurl4t64 from version 8.5.0-2ubuntu10.7 to 8.5.0-2ubuntu10.8
• Updated libfreetype6 from version 2.13.2+dfsg-1build3 to 2.13.2+dfsg-1ubuntu0.1
• Updated libgprofng0 from version 2.42-4ubuntu2.8 to 2.42-4ubuntu2.10
• Updated libmount1 from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5
• Updated libsframe1 from version 2.42-4ubuntu2.8 to 2.42-4ubuntu2.10
• Updated libsmartcols1 from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5
• Updated libssh-4 from version 0.10.6-2ubuntu0.3 to 0.10.6-2ubuntu0.4
• Updated libtiff6 from version 4.5.1+git230720-4ubuntu2.4 to 4.5.1+git230720-4ubuntu2.5
• Updated libuuid1 from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5
• Updated mount from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5
• Updated openssh-client from version 1:9.6p1-3ubuntu13.14 to 1:9.6p1-3ubuntu13.15
• Updated openssh-server from version 1:9.6p1-3ubuntu13.14 to 1:9.6p1-3ubuntu13.15
• Updated openssh-sftp-server from version 1:9.6p1-3ubuntu13.14 to 1:9.6p1-3ubuntu13.15
• Updated util-linux from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5

Updates to packages available at build time only

• Updated libblkid-dev from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5
• Updated libcurl4-openssl-dev from version 8.5.0-2ubuntu10.7 to 8.5.0-2ubuntu10.8
• Updated libfreetype-dev from version 2.13.2+dfsg-1build3 to 2.13.2+dfsg-1ubuntu0.1
• Updated libmount-dev from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5
• Updated libtiff-dev from version 4.5.1+git230720-4ubuntu2.4 to 4.5.1+git230720-4ubuntu2.5
• Updated libtiffxx6 from version 4.5.1+git230720-4ubuntu2.4 to 4.5.1+git230720-4ubuntu2.5
• Updated linux-libc-dev from version 6.8.0-101.101 to 6.8.0-106.106
• Updated uuid-dev from version 2.39.3-9ubuntu6.4 to 2.39.3-9ubuntu6.5