Heroku-22 and Heroku-24 stacks updated

Change effective on 22 April 2026

We updated the heroku-22 and heroku-24 stacks to pick up security fixes in upstream packages. The new base images for each stack roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces.

If you use Heroku’s default buildpack-powered build system/stacks, you don’t need to redeploy your app to include these changes. We automatically restart any running dynos as we roll out the new base images for each stack. For Cedar-generation apps, each time a dyno starts, the slug applies on top of the most recent base image. For Fir-generation apps, the built image gets rebased on top of the most recent base image.

If your app uses Heroku’s container stack (most don’t), you must rebuild your app’s Docker image to pick up updates in the base image specified in your Dockerfile.

See this Dev Center article for an overview of the packages available in each stack’s base image.

Changelog of packages

Stack: heroku-22

  • Updated libcap2 from version 1:2.44-1ubuntu0.22.04.2 to 1:2.44-1ubuntu0.22.04.3
  • Updated libcap2-bin from version 1:2.44-1ubuntu0.22.04.2 to 1:2.44-1ubuntu0.22.04.3
  • Updated libgdk-pixbuf-2.0-0 from version 2.42.8+dfsg-1ubuntu0.4 to 2.42.8+dfsg-1ubuntu0.5
  • Updated libgdk-pixbuf2.0-common from version 2.42.8+dfsg-1ubuntu0.4 to 2.42.8+dfsg-1ubuntu0.5
  • Updated libssl3 from version 3.0.2-0ubuntu1.21 to 3.0.2-0ubuntu1.23
  • Updated linux-libc-dev from version 5.15.0-174.184 to 5.15.0-176.186
  • Updated openssl from version 3.0.2-0ubuntu1.21 to 3.0.2-0ubuntu1.23

Updates to packages available at build time only

  • Updated gir1.2-gdkpixbuf-2.0 from version 2.42.8+dfsg-1ubuntu0.4 to 2.42.8+dfsg-1ubuntu0.5
  • Updated libcap-dev from version 1:2.44-1ubuntu0.22.04.2 to 1:2.44-1ubuntu0.22.04.3
  • Updated libgdk-pixbuf-2.0-dev from version 2.42.8+dfsg-1ubuntu0.4 to 2.42.8+dfsg-1ubuntu0.5
  • Updated libgdk-pixbuf2.0-bin from version 2.42.8+dfsg-1ubuntu0.4 to 2.42.8+dfsg-1ubuntu0.5
  • Updated libssl-dev from version 3.0.2-0ubuntu1.21 to 3.0.2-0ubuntu1.23

Stack: heroku-24

  • Updated libcap2 from version 1:2.66-5ubuntu2.2 to 1:2.66-5ubuntu2.4
  • Updated libcap2-bin from version 1:2.66-5ubuntu2.2 to 1:2.66-5ubuntu2.4
  • Updated libgdk-pixbuf-2.0-0 from version 2.42.10+dfsg-3ubuntu3.2 to 2.42.10+dfsg-3ubuntu3.3
  • Updated libgdk-pixbuf2.0-common from version 2.42.10+dfsg-3ubuntu3.2 to 2.42.10+dfsg-3ubuntu3.3
  • Updated libssl3t64 from version 3.0.13-0ubuntu3.7 to 3.0.13-0ubuntu3.9
  • Updated openssl from version 3.0.13-0ubuntu3.7 to 3.0.13-0ubuntu3.9

Updates to packages available at build time only

  • Updated gir1.2-gdkpixbuf-2.0 from version 2.42.10+dfsg-3ubuntu3.2 to 2.42.10+dfsg-3ubuntu3.3
  • Updated libgdk-pixbuf-2.0-dev from version 2.42.10+dfsg-3ubuntu3.2 to 2.42.10+dfsg-3ubuntu3.3
  • Updated libgdk-pixbuf2.0-bin from version 2.42.10+dfsg-3ubuntu3.2 to 2.42.10+dfsg-3ubuntu3.3
  • Updated libpython3.12-minimal from version 3.12.3-1ubuntu0.12 to 3.12.3-1ubuntu0.13
  • Updated libpython3.12-stdlib from version 3.12.3-1ubuntu0.12 to 3.12.3-1ubuntu0.13
  • Updated libssl-dev from version 3.0.13-0ubuntu3.7 to 3.0.13-0ubuntu3.9
  • Updated linux-libc-dev from version 6.8.0-107.107 to 6.8.0-110.110
  • Updated python3.12 from version 3.12.3-1ubuntu0.12 to 3.12.3-1ubuntu0.13
  • Updated python3.12-minimal from version 3.12.3-1ubuntu0.12 to 3.12.3-1ubuntu0.13