Hi Armin, I noticed that this patch, as well as the version bump to 4.1.3, have landed in the dunfell-next branch of meta-security. Curiously though, the dunfell branch contains quite a few more recen

Minor version bump from 4.1.1 to 4.1.3, containing two fixes: 4.1.3 - 2020-06-02 * tpm2_create: Fix issue with userauth attribute being cleared if policy is specified. 4.1.2 - 2020-05-18 * Fix missing

tpm2_import used a fixed AES key for the inner wrapper, which means that a MITM attack would be able to unwrap the imported key. Even the use of an encrypted session will not prevent this. The TPM onl

tpm2_import: fix fixed AES key CVE-2021-3565 Upstream commit (with offset adjusted) https://github.com/tpm2-software/tpm2-tools/commit/c069e4f179d5e6653a84fb236816c375dca82515 Signed-off-by: Ralph Sie

Hi Ashish, This is normal behaviour, even when building the kernel directly (eg. not using Yocto). It is a bit surprising at first, but it all comes down to dependencies in the Makefile for the kernel