This message was deleted.

Yes, the config file will be restored after reboot like you mentioned, one way to fix this is modify

/oem/90_custom.yaml

and add a new command in stages/initramfs/commands

name: Harvester Configuration
stages:
    initramfs:
        - commands:
          ...
          - "the vulnerability fix"

@bright-flag-87778 Thanks for sharing the solution . I am using v1.3.1 , vulnerabilities like SHA1 deprecated setting for SSH & Deprecated SSH cryptographic settings was reported.

Thank you, @blue-farmer-46993. Could you provide a bit more detail? I’m unsure if this requires upgrading

sshd

or simply adjusting the configuration. If it's something we need to address, we can certainly take care of it.

I think starting Opensh 8.8 sha1 is disabled and I think they must have resolved other vulnerabilities as well. I feel upgrading is a good option.