Heroku-22, Heroku-24 and Heroku-26 stacks updated

Change effective on 17 June 2026

We updated the heroku-22, heroku-24 and heroku-26 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

The Heroku-22 stack is deprecated and will reach end-of-life on April 30th, 2027. Upgrade to a newer stack as soon as possible. See the Heroku-22 End-Of-Life FAQ for more details.

Changelog of packages

Stack: heroku-22

  • Updated ca-certificates from version 20240203~22.04.1 to 20260601~22.04.1
  • Updated libcups2 from version 2.4.1op1-1ubuntu4.16 to 2.4.1op1-1ubuntu4.21
  • Updated libgraphite2-3 from version 1.3.14-1build2 to 1.3.14-1ubuntu0.1
  • Updated libpoppler-glib8 from version 22.02.0-2ubuntu0.12 to 22.02.0-2ubuntu0.13
  • Updated libpoppler118 from version 22.02.0-2ubuntu0.12 to 22.02.0-2ubuntu0.13
  • Updated librabbitmq4 from version 0.10.0-1ubuntu2 to 0.10.0-1ubuntu2.1
  • Updated libssl3 from version 3.0.2-0ubuntu1.23 to 3.0.2-0ubuntu1.25
  • Updated libsystemd0 from version 249.11-0ubuntu3.20 to 249.11-0ubuntu3.21
  • Updated libudev1 from version 249.11-0ubuntu3.20 to 249.11-0ubuntu3.21
  • Updated linux-libc-dev from version 5.15.0-179.189 to 5.15.0-181.191
  • Updated nano from version 6.2-1ubuntu0.1 to 6.2-1ubuntu0.2
  • Updated openssl from version 3.0.2-0ubuntu1.23 to 3.0.2-0ubuntu1.25
  • Updated poppler-utils from version 22.02.0-2ubuntu0.12 to 22.02.0-2ubuntu0.13
  • Updated rsync from version 3.2.7-0ubuntu0.22.04.6 to 3.2.7-0ubuntu0.22.04.7
  • Updated systemd from version 249.11-0ubuntu3.20 to 249.11-0ubuntu3.21

Updates to packages available at build time only

  • Updated librabbitmq-dev from version 0.10.0-1ubuntu2 to 0.10.0-1ubuntu2.1
  • Updated libssl-dev from version 3.0.2-0ubuntu1.23 to 3.0.2-0ubuntu1.25
  • Updated libsystemd-dev from version 249.11-0ubuntu3.20 to 249.11-0ubuntu3.21
  • Updated libudev-dev from version 249.11-0ubuntu3.20 to 249.11-0ubuntu3.21
  • Updated python3-urllib3 from version 1.26.5-1~exp1ubuntu0.6 to 1.26.5-1~exp1ubuntu0.7

Stack: heroku-24

  • Updated ca-certificates from version 20240203 to 20260601~24.04.1
  • Updated inetutils-telnet from version 2:2.5-3ubuntu4.1 to 2:2.5-3ubuntu4.2
  • Updated libcups2t64 from version 2.4.7-1.2ubuntu7.9 to 2.4.7-1.2ubuntu7.14
  • Updated libgraphite2-3 from version 1.3.14-2build1 to 1.3.14-2ubuntu0.24.04.1
  • Updated libpoppler-glib8t64 from version 24.02.0-1ubuntu9.8 to 24.02.0-1ubuntu9.9
  • Updated libpoppler134 from version 24.02.0-1ubuntu9.8 to 24.02.0-1ubuntu9.9
  • Updated librabbitmq4 from version 0.11.0-1build2 to 0.11.0-1ubuntu0.1
  • Updated libssl3t64 from version 3.0.13-0ubuntu3.9 to 3.0.13-0ubuntu3.11
  • Updated libsystemd0 from version 255.4-1ubuntu8.15 to 255.4-1ubuntu8.16
  • Updated libudev1 from version 255.4-1ubuntu8.15 to 255.4-1ubuntu8.16
  • Updated nano from version 7.2-2ubuntu0.1 to 7.2-2ubuntu0.2
  • Updated openssl from version 3.0.13-0ubuntu3.9 to 3.0.13-0ubuntu3.11
  • Updated poppler-utils from version 24.02.0-1ubuntu9.8 to 24.02.0-1ubuntu9.9
  • Updated rsync from version 3.2.7-1ubuntu1.4 to 3.2.7-1ubuntu1.5

Updates to packages available at build time only

  • Updated librabbitmq-dev from version 0.11.0-1build2 to 0.11.0-1ubuntu0.1
  • Updated libssl-dev from version 3.0.13-0ubuntu3.9 to 3.0.13-0ubuntu3.11

Stack: heroku-26

  • Updated ca-certificates from version 20260223 to 20260601~26.04.1
  • Updated inetutils-telnet from version 2:2.7-2ubuntu1 to 2:2.7-2ubuntu1.1
  • Updated libcups2t64 from version 2.4.16-1ubuntu1 to 2.4.16-1ubuntu1.3
  • Updated libgraphite2-3 from version 1.3.14-11ubuntu1 to 1.3.14-11ubuntu1.1
  • Updated libjxl0.11 from version 0.11.1-6ubuntu4 to 0.11.1-6ubuntu4.2
  • Updated libpoppler-glib8t64 from version 26.01.0-2build2 to 26.01.0-2ubuntu0.1
  • Updated libpoppler156 from version 26.01.0-2build2 to 26.01.0-2ubuntu0.1
  • Updated librabbitmq4 from version 0.15.0-1build2 to 0.15.0-1ubuntu0.26.04.1
  • Updated libssl3t64 from version 3.5.5-1ubuntu3 to 3.5.5-1ubuntu3.2
  • Updated nano from version 8.7.1-1 to 8.7.1-1ubuntu0.1
  • Updated openssl from version 3.5.5-1ubuntu3 to 3.5.5-1ubuntu3.2
  • Updated openssl-provider-legacy from version 3.5.5-1ubuntu3 to 3.5.5-1ubuntu3.2
  • Updated poppler-utils from version 26.01.0-2build2 to 26.01.0-2ubuntu0.1
  • Updated rsync from version 3.4.1+ds1-7ubuntu0.2 to 3.4.1+ds1-7ubuntu0.3

Updates to packages available at build time only

  • Updated librabbitmq-dev from version 0.15.0-1build2 to 0.15.0-1ubuntu0.26.04.1
  • Updated libssl-dev from version 3.5.5-1ubuntu3 to 3.5.5-1ubuntu3.2