Heroku-22 and Heroku-24 stacks updated

Change effective on 23 October 2025

We updated the heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-22

• Updated curl from version 7.81.0-1ubuntu1.20 to 7.81.0-1ubuntu1.21
• Updated distro-info-data from version 0.52ubuntu0.9 to 0.52ubuntu0.11
• Updated dpkg from version 1.21.1ubuntu2.3 to 1.21.1ubuntu2.6
• Updated ghostscript from version 9.55.0~dfsg1-0ubuntu5.12 to 9.55.0~dfsg1-0ubuntu5.13
• Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.20 to 7.81.0-1ubuntu1.21
• Updated libcurl4 from version 7.81.0-1ubuntu1.20 to 7.81.0-1ubuntu1.21
• Updated libgs9 from version 9.55.0~dfsg1-0ubuntu5.12 to 9.55.0~dfsg1-0ubuntu5.13
• Updated libgs9-common from version 9.55.0~dfsg1-0ubuntu5.12 to 9.55.0~dfsg1-0ubuntu5.13
• Updated libpoppler-glib8 from version 22.02.0-2ubuntu0.10 to 22.02.0-2ubuntu0.11
• Updated libpoppler118 from version 22.02.0-2ubuntu0.10 to 22.02.0-2ubuntu0.11
• Updated libpq5 from version 17.6-1.pgdg22.04+1 to 18.0-1.pgdg22.04+3
• Updated libssl3 from version 3.0.2-0ubuntu1.19 to 3.0.2-0ubuntu1.20
• Updated libsystemd0 from version 249.11-0ubuntu3.16 to 249.11-0ubuntu3.17
• Updated libtiff5 from version 4.3.0-6ubuntu0.11 to 4.3.0-6ubuntu0.12
• Updated libudev1 from version 249.11-0ubuntu3.16 to 249.11-0ubuntu3.17
• Updated linux-libc-dev from version 5.15.0-156.166 to 5.15.0-160.170
• Updated openssl from version 3.0.2-0ubuntu1.19 to 3.0.2-0ubuntu1.20
• Updated poppler-utils from version 22.02.0-2ubuntu0.10 to 22.02.0-2ubuntu0.11
• Updated postgresql-client-17 from version 17.6-1.pgdg22.04+1 to 17.6-2.pgdg22.04+1
• Updated postgresql-client-common from version 281.pgdg22.04+1 to 285.pgdg22.04+1
• Updated systemd from version 249.11-0ubuntu3.16 to 249.11-0ubuntu3.17

Updates to packages available at build time only

• Updated dpkg-dev from version 1.21.1ubuntu2.3 to 1.21.1ubuntu2.6
• Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.20 to 7.81.0-1ubuntu1.21
• Updated libdpkg-perl from version 1.21.1ubuntu2.3 to 1.21.1ubuntu2.6
• Updated libgs-dev from version 9.55.0~dfsg1-0ubuntu5.12 to 9.55.0~dfsg1-0ubuntu5.13
• Updated libpq-dev from version 17.6-1.pgdg22.04+1 to 18.0-1.pgdg22.04+3
• Updated libssl-dev from version 3.0.2-0ubuntu1.19 to 3.0.2-0ubuntu1.20
• Updated libsystemd-dev from version 249.11-0ubuntu3.16 to 249.11-0ubuntu3.17
• Updated libtiff-dev from version 4.3.0-6ubuntu0.11 to 4.3.0-6ubuntu0.12
• Updated libtiffxx5 from version 4.3.0-6ubuntu0.11 to 4.3.0-6ubuntu0.12
• Updated libudev-dev from version 249.11-0ubuntu3.16 to 249.11-0ubuntu3.17
• Updated libunbound8 from version 1.13.1-1ubuntu5.11 to 1.13.1-1ubuntu5.12

Stack: heroku-24

• Updated dpkg from version 1.22.6ubuntu6.2 to 1.22.6ubuntu6.5
• Updated ghostscript from version 10.02.1~dfsg1-0ubuntu7.7 to 10.02.1~dfsg1-0ubuntu7.8
• Updated libgs-common from version 10.02.1~dfsg1-0ubuntu7.7 to 10.02.1~dfsg1-0ubuntu7.8
• Updated libgs10 from version 10.02.1~dfsg1-0ubuntu7.7 to 10.02.1~dfsg1-0ubuntu7.8
• Updated libgs10-common from version 10.02.1~dfsg1-0ubuntu7.7 to 10.02.1~dfsg1-0ubuntu7.8
• Updated libpoppler-glib8t64 from version 24.02.0-1ubuntu9.6 to 24.02.0-1ubuntu9.7
• Updated libpoppler134 from version 24.02.0-1ubuntu9.6 to 24.02.0-1ubuntu9.7
• Updated libpq5 from version 17.6-1.pgdg24.04+1 to 18.0-1.pgdg24.04+3
• Updated libssl3t64 from version 3.0.13-0ubuntu3.5 to 3.0.13-0ubuntu3.6
• Updated libsystemd0 from version 255.4-1ubuntu8.10 to 255.4-1ubuntu8.11
• Updated libtiff6 from version 4.5.1+git230720-4ubuntu2.3 to 4.5.1+git230720-4ubuntu2.4
• Updated libudev1 from version 255.4-1ubuntu8.10 to 255.4-1ubuntu8.11
• Updated openssl from version 3.0.13-0ubuntu3.5 to 3.0.13-0ubuntu3.6
• Updated poppler-utils from version 24.02.0-1ubuntu9.6 to 24.02.0-1ubuntu9.7
• Updated postgresql-client-17 from version 17.6-1.pgdg24.04+1 to 17.6-2.pgdg24.04+1
• Updated postgresql-client-common from version 281.pgdg24.04+1 to 285.pgdg24.04+1
• Added libatomic1 version 14.2.0-4ubuntu2~24.04

Updates to packages available at build time only

• Updated dpkg-dev from version 1.22.6ubuntu6.2 to 1.22.6ubuntu6.5
• Updated libdpkg-perl from version 1.22.6ubuntu6.2 to 1.22.6ubuntu6.5
• Updated libpq-dev from version 17.6-1.pgdg24.04+1 to 18.0-1.pgdg24.04+3
• Updated libssl-dev from version 3.0.13-0ubuntu3.5 to 3.0.13-0ubuntu3.6
• Updated libtiff-dev from version 4.5.1+git230720-4ubuntu2.3 to 4.5.1+git230720-4ubuntu2.4
• Updated libtiffxx6 from version 4.5.1+git230720-4ubuntu2.3 to 4.5.1+git230720-4ubuntu2.4
• Updated linux-libc-dev from version 6.8.0-84.84 to 6.8.0-86.87