Heroku-20, Heroku-22 and Heroku-24 stacks updated

Change effective on 07 January 2025

We have updated the heroku-20, heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack will be rolled out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you are using Heroku’s default buildpack-powered build system/stacks you do not need to redeploy your app to pick up these changes. Depending on the platform generation you are using, either your application’s slug is applied on top of the most recent base image for the stack each time a dyno starts, or the built image for your app gets rebased on top the most recent base image for the stack by Heroku. Currently running dynos will be automatically restarted.

If your app instead uses Heroku’s container stack (most apps do not), you will need to rebuild your app’s Docker image in order to pick up any updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

The Heroku-20 stack is deprecated and will reach end-of-life on April 30th, 2025. Please upgrade to a newer stack as soon as possible. See the Heroku-20 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-20

  • Updated curl from version 7.68.0-1ubuntu2.24 to 7.68.0-1ubuntu2.25
  • Updated libcurl3-gnutls from version 7.68.0-1ubuntu2.24 to 7.68.0-1ubuntu2.25
  • Updated libcurl4 from version 7.68.0-1ubuntu2.24 to 7.68.0-1ubuntu2.25
  • Updated libexpat1 from version 2.2.9-1ubuntu0.7 to 2.2.9-1ubuntu0.8
  • Updated linux-libc-dev from version 5.4.0-200.220 to 5.4.0-204.224

Updates to packages available at build time only

  • Updated libcurl4-openssl-dev from version 7.68.0-1ubuntu2.24 to 7.68.0-1ubuntu2.25
  • Updated libexpat1-dev from version 2.2.9-1ubuntu0.7 to 2.2.9-1ubuntu0.8
  • Updated libpython2.7-minimal from version 2.7.18-1~20.04.6 to 2.7.18-1~20.04.7
  • Updated libpython2.7-stdlib from version 2.7.18-1~20.04.6 to 2.7.18-1~20.04.7
  • Updated python2.7 from version 2.7.18-1~20.04.6 to 2.7.18-1~20.04.7
  • Updated python2.7-minimal from version 2.7.18-1~20.04.6 to 2.7.18-1~20.04.7

Stack: heroku-22

  • Updated curl from version 7.81.0-1ubuntu1.19 to 7.81.0-1ubuntu1.20
  • Updated libcurl3-gnutls from version 7.81.0-1ubuntu1.19 to 7.81.0-1ubuntu1.20
  • Updated libcurl4 from version 7.81.0-1ubuntu1.19 to 7.81.0-1ubuntu1.20
  • Updated libexpat1 from version 2.4.7-1ubuntu0.4 to 2.4.7-1ubuntu0.5
  • Updated linux-libc-dev from version 5.15.0-126.136 to 5.15.0-130.140

Updates to packages available at build time only

  • Updated libcurl4-openssl-dev from version 7.81.0-1ubuntu1.19 to 7.81.0-1ubuntu1.20
  • Updated libexpat1-dev from version 2.4.7-1ubuntu0.4 to 2.4.7-1ubuntu0.5

Stack: heroku-24

  • Updated curl from version 8.5.0-2ubuntu10.5 to 8.5.0-2ubuntu10.6
  • Updated libcurl3t64-gnutls from version 8.5.0-2ubuntu10.5 to 8.5.0-2ubuntu10.6
  • Updated libcurl4t64 from version 8.5.0-2ubuntu10.5 to 8.5.0-2ubuntu10.6
  • Updated libexpat1 from version 2.6.1-2ubuntu0.1 to 2.6.1-2ubuntu0.2
  • Updated libspeex1 from version 1.2.1-2ubuntu2 to 1.2.1-2ubuntu2.24.04.1
  • Updated zip from version 3.0-13build1 to 3.0-13ubuntu0.1

Updates to packages available at build time only

  • Updated cpp-13 from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated cpp-13-aarch64-linux-gnu/cpp-13-x86-64-linux-gnu from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated g++-13 from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated g++-13-aarch64-linux-gnu/g++-13-x86-64-linux-gnu from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated gcc-13 from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated gcc-13-aarch64-linux-gnu/gcc-13-x86-64-linux-gnu from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated gcc-13-base from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated libcurl4-openssl-dev from version 8.5.0-2ubuntu10.5 to 8.5.0-2ubuntu10.6
  • Updated libexpat1-dev from version 2.6.1-2ubuntu0.1 to 2.6.1-2ubuntu0.2
  • Updated libgcc-13-dev from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated libstdc++-13-dev from version 13.2.0-23ubuntu4 to 13.3.0-6ubuntu2~24.04
  • Updated linux-libc-dev from version 6.8.0-49.49 to 6.8.0-51.52