Security update for SUSE Manager Server 4.3

This update fixes the following issues:

branch-network-formula:

- Update to version 0.1.1680167239.23f2fec
* Remove unnecessary import of 'salt.ext.six'

cobbler:

- Fix cobbler buildiso so that the artifact can be booted by EFI firmware. (bsc#1206060)
- Switch packaging from patch based to Git tree based development
- S390X systems require their kernel options to have a linebreak at 79 characters (bsc#1207595)
- Settings-migration-v1-to-v2.sh will now handle paths with whitespace correctly
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- 'cobbler buildiso' arguments '--system' and '--profile' are now accepted in the right order (bsc#1210776)

cpu-mitigations-formula:

- Update to version 0.5.0:
* Mark all SUSE Linux Enterprise 15 SP4 and newer and
openSUSE 15.4 and newer as supported (bsc#1210835)

hub-xmlrpc-api:

- Do not strictly require Go 1.18 on
SUSE Linux Enterprise 15 SP3 (bsc#1203599)

perl-Satcon:

- Version 4.3.2-1
* Accept keys with dots

python-urlgrabber:

- Raise proper exception from urlgrab() when local file is not found (bsc#1208288)

spacecmd:

- Version 4.3.21-1
* Fix argument parsing of distribution_update (bsc#1210458)
- Version 4.3.20-1
* Display activation key details after executing the corresponding command (bsc#1208719)
* Show targetted packages before actually removing them (bsc#1207830)

spacewalk-admin:

- Version 4.3.11-1
* change backup file extension from .orig to .current_time (bsc#1206783)

spacewalk-backend:

- Version 4.3.21-1
* Add package details to reposync error logging
* Fix the mgr-inter-sync not creating valid repository metadata when dealing with empty channels (bsc#1207829)
* Filter CLM modular packages using release strings (bsc#1207814)
* Fix issues with kickstart syncing on mirrorlist repositories
* Do not sync .mirrorlist and other non needed files
* reposync: catch local file not found urlgrabber error properly (bsc#1208288)
- Version 4.3.20-1
* Fix repo sync for cloud payg connected repositories (bsc#1208772)

spacewalk-config:

- Version 4.3.10-1
* Add /saltboot directory
* Mark /os-images and /tftp as static content

spacewalk-java:

- Security fixes included in this version update from 4.3.52-1 to 4.3.58-1:
* CVE-2023-22644: Fix session information leak (bsc#1210107)
* CVE-2023-22644: Do not output cobbler xmlrpc token in debug logs (bsc#1210162)
* CVE-2023-22644: fix credentials and other secrets disclosure when debug log is enabled (bsc#1210154)
* CVE-2023-22644: Don't output URL parameters for tiny urls (bsc#1210101)
* CVE-2023-22644: Do not log SSL certificate / key file content (bsc#1210094)
* CVE-2023-22644: Remove web session swap secrets output in logs (bsc#1210086)
- Non-security bug fixes included in this version update from 4.3.52-1 to 4.3.58-1:
* Version 4.3.58-1
+ Make sure that all hibernate connections are closed (bsc#1208687)
* Version 4.3.57-1
+ Update version of tomcat build dependencies
* Version 4.3.55-1
+ Fix breadcrumbs on recurring actions pages
* Version 4.3.54-1
+ Kernel options: only add quotes if there is a space in the value (bsc#1209926)
* Version 4.3.53-1
+ Update Cobbler profile when a new image is deployed
+ Add mapping of image URLs for containerized proxy
+ Remove channels from client after transfer to a different organization (bsc#1209220)
+ Fix RHEL9 / SLL9 product discovery (bsc#1209993)
+ Fix displaying system channels when no base product is installed (bsc#1206423)
+ Fix NPE in cobbler system sync when server has no creator set
+ Recurring custom states
+ Removed the expensive 'diff' column (bsc#1208427)
+ Fix possible 'NullPointerException' when clicking on the 'Create PXE installation configuration' button from
Provising page
+ Fix possible 'NullPointerException' issues when running cobbler-sync-bunch
+ Do not trigger extra cobbler sync when changing kickstart data (bsc#1208536)
+ Set jasper development mode to false (bsc#1206191)
+ Fixed select all for ptf packages list (bsc#1209143)
+ Added SLES 12 support for ptf removal
+ Fixed issue with checking ptf repositories on cloned channels
+ Add support to add optional channels via webUI
+ Added APIs to allow frontend to install and remove ptf
+ Show the package summary where applicable to better describe PTF packages
+ Added CLM filters to match product temporary fixes packages
+ Restrict product temporary fixes visibility in the UI and in the APIs responses
+ Fixed empty selection warning in the lock/unlock page
+ Set GPG Key Url for PTF repositories
+ Fix deleting custom info pillar (bsc#1209253)
+ Update report outdated system query to de-duplicate errata id's
+ Refactor Software / Manage / Packages to use SQL paging (bsc#1206725)
+ Filter CLM modular packages using release strings (bsc#1207814)
+ Fix systems subscribed to channel CSV download (bsc#1201063)
+ Fix cobbler system entries for retail terminals (bsc#1208661)
+ Make API method systemgroup.listSystemsMinimal read-only (bsc#1208550)
+ Add missing text for user preferenaces page
+ Do not include channels from different orgs when listing mandatory channels (bsc#1204270)
+ Save scheduler user when creating Patch actions manually (bsc#1208321)
* Version 4.3.52-1
+ Add more restricted arguments to prevent HTTP API logging sensitive data (bsc#1209386, bsc#1209395)
* Version 4.3.51-1
+ Support multiple gpgkey urls for a channel (bsc#1208540)

spacewalk-search:

- Version 4.3.9-1
* Add maxPoolSize option to search

spacewalk-setup:

- Version 4.3.16-1
* Enable netapi clients in master configuration (required for Salt 3006)
* Persist report_db_sslrootcert value (bsc#1210349)
* Fix migration test
* Escape `%` in spec file.
* remove useless tomcat configuration (bsc#1206191)
* use template for reportdb configuration (bsc#1206783)

spacewalk-web