SUSE-RU-2025:3688-1: important: Recommended update for pacemaker

[SLE-UPDATES]

# Recommended update for pacemaker

Announcement ID: SUSE-RU-2025:3688-1  
Release Date: 2025-10-21T05:45:48Z  
Rating: important  
References:

  * bsc#1232276
  * bsc#1239533
  * bsc#1246622
  * bsc#1250349

  
Affected Products:

  * SUSE Linux Enterprise High Availability Extension 15 SP7
  * SUSE Linux Enterprise Server 15 SP7
  * SUSE Linux Enterprise Server for SAP Applications 15 SP7

  
  
An update that has four fixes can now be installed.

## Description:

This update for pacemaker fixes the following issues:

  * tools: Prevent crm_verify from stating configuration is "invalid" if it only
    has warnings (bsc#1250349)
  * various: Avoid warnings about a negative value for `stonith-watchdog-
    timeout` (bsc#1246622)
  * libcrmcommon: Increase poll() timeout to 5s for liveness checks on sub-
    daemons (bsc#1239533)
  * libpacemaker: Do not retry on ECONNREFUSED in tools.
  * libcrmcommon: Add retries on connect to avoid fatal errors when sub-daemons
    communicate
  * libcrmservice: consider a monitor pending if LoadUnit receives no reply from
    systemd (bsc#1232276)
  * libcib: Move the gnutls guard up a few lines.
  * NLS: update translations for current code base
  * daemons: Fix a toctou bug when fetching additional schemas.
  * daemons: Fix a bug iterating in get_op_total_timeout.
  * Address coverity issues.
  * Address certain clang static analysis errors.
  * libs: Fix cppcheck warnings.
  * scheduler: Lower fencing log message to debug level.

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise High Availability Extension 15 SP7  
    zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2025-3688=1

## Package List:

  * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le
    s390x x86_64)
    * pacemaker-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-libs-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-cli-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-remote-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-libs-debuginfo-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-debuginfo-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-devel-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-cli-debuginfo-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-debugsource-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-remote-debuginfo-2.1.10+20250718.fdf796ebc8-150700.3.3.1
  * SUSE Linux Enterprise High Availability Extension 15 SP7 (noarch)
    * pacemaker-schemas-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * python3-pacemaker-2.1.10+20250718.fdf796ebc8-150700.3.3.1
    * pacemaker-cts-2.1.10+20250718.fdf796ebc8-150700.3.3.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1232276
  * https://bugzilla.suse.com/show_bug.cgi?id=1239533
  * https://bugzilla.suse.com/show_bug.cgi?id=1246622
  * https://bugzilla.suse.com/show_bug.cgi?id=1250349

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20251021/12fd22da/attachment.htm>