diff --git a/JeOS.kiwi b/JeOS.kiwi
index 3ab232f..1c0cbfe 100644
--- a/JeOS.kiwi
+++ b/JeOS.kiwi
@@ -334,6 +334,7 @@
         <package name="raspberrypi-firmware" arch="aarch64"/>
         <package name="raspberrypi-firmware-config" arch="aarch64"/>
         <package name="raspberrypi-firmware-dt" arch="aarch64"/>
+	<package name="arm-trusted-firmware-rpi4" arch="aarch64"/>
         <package name="dracut-kiwi-oem-repart"/>
         <package name="kernel-default"/>
         <!-- For WiFi: -->
diff --git a/kiwi-templates-JeOS.changes b/kiwi-templates-JeOS.changes
index d98b322..0d23fb7 100644
--- a/kiwi-templates-JeOS.changes
+++ b/kiwi-templates-JeOS.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Fri Jan 28 15:27:59 UTC 2022 - Ivan Ivanov <ivan.ivanov@suse.com>
+
+- Add Trusted Firmware-A (TF-A) package in RaspberryPi images
+  which mitigate few CVE issues found in RPi4 Cortex A72 CPU.
+  See bsc#1173489.
+
 -------------------------------------------------------------------
 Tue Jan 18 15:23:14 UTC 2022 - Fabian Vogt <fvogt@suse.com>