diff --git a/rust/tool/systemd/Cargo.toml b/rust/tool/systemd/Cargo.toml
index 99d6cfb..2eb5278 100644
--- a/rust/tool/systemd/Cargo.toml
+++ b/rust/tool/systemd/Cargo.toml
@@ -6,11 +6,11 @@ edition = "2021"
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-anyhow = "1.0.80"
+anyhow = "1.0.81"
 base32ct = { version = "0.2.0", features = ["alloc"] }
 stderrlog = "0.6.0"
 log = { version = "0.4.21", features = ["std"] }
-clap = { version = "4.5.2", features = ["derive"] }
+clap = { version = "4.5.3", features = ["derive"] }
 lanzaboote_tool = { path = "../shared" }
 indoc = "2.0.4"
 serde_json = "1.0.114"
diff --git a/rust/uefi/Cargo.lock b/rust/uefi/Cargo.lock
index db19c6c..c943081 100644
--- a/rust/uefi/Cargo.lock
+++ b/rust/uefi/Cargo.lock
@@ -10,9 +10,9 @@ checksum = "dc827186963e592360843fb5ba4b973e145841266c1357f7180c43526f2e5b61"
 
 [[package]]
 name = "bitflags"
-version = "2.4.2"
+version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed570934406eb16438a4e976b1b4500774099c13b8cb96eec99f620f05090ddf"
+checksum = "cf4b9d6a944f767f8e5e0db018570623c85f3d925ac718db4e06d0187adb21c1"
 
 [[package]]
 name = "block-buffer"
@@ -274,9 +274,9 @@ dependencies = [
 
 [[package]]
 name = "uefi"
-version = "0.26.0"
+version = "0.27.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07ead9f748a4646479b850add36b527113a80e80a7e0f44d7b0334291850dcc5"
+checksum = "89ee9c34c612d45735fef4c478450cd2a1e64e59ad1e5988e5024af53914a854"
 dependencies = [
  "bitflags",
  "log",
@@ -311,9 +311,9 @@ dependencies = [
 
 [[package]]
 name = "uefi-services"
-version = "0.23.0"
+version = "0.24.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a79fcb420624743c895bad0f9480fbc2f64e7c8d8611fb1ada6bdd799942feb4"
+checksum = "292d48d6dae6fb4a5f960bab64a72e9dcdbe3db7dd706ae0ace5de24580d2840"
 dependencies = [
  "cfg-if",
  "log",
diff --git a/rust/uefi/linux-bootloader/Cargo.toml b/rust/uefi/linux-bootloader/Cargo.toml
index d907833..7c7bf80 100644
--- a/rust/uefi/linux-bootloader/Cargo.toml
+++ b/rust/uefi/linux-bootloader/Cargo.toml
@@ -12,10 +12,10 @@ repository = "https://github.com/nix-community/lanzaboote/"
 rust-version = "1.68"
 
 [dependencies]
-uefi = { version = "0.26.0", default-features = false, features = [ "alloc", "global_allocator" ] }
+uefi = { version = "0.27.0", default-features = false, features = [ "alloc", "global_allocator" ] }
 # Update blocked by #237
 goblin = { version = "=0.6.1", default-features = false, features = [ "pe64", "alloc" ]}
-bitflags = "2.4.2"
+bitflags = "2.5.0"
 
 # Even in debug builds, we don't enable the debug logs, because they generate a lot of spam from goblin.
 log = { version = "0.4.21", default-features = false, features = [ "max_level_info", "release_max_level_warn" ]}
diff --git a/rust/uefi/pio/Cargo.toml b/rust/uefi/pio/Cargo.toml
index a7c7b82..3324e9e 100644
--- a/rust/uefi/pio/Cargo.toml
+++ b/rust/uefi/pio/Cargo.toml
@@ -7,7 +7,7 @@ edition = "2021"
 
 [dependencies]
 embedded-io = { version = "0.6.1", features = [ "alloc" ] }
-snafu = { version = "0.8.1", default-features = false }
+snafu = { version = "0.8.2", default-features = false }
 
 [dev-dependencies]
 cpio = "0.2.2"
diff --git a/rust/uefi/stub/Cargo.toml b/rust/uefi/stub/Cargo.toml
index 15b55ae..7d500a6 100644
--- a/rust/uefi/stub/Cargo.toml
+++ b/rust/uefi/stub/Cargo.toml
@@ -5,8 +5,8 @@ edition = "2021"
 publish = false
 
 [dependencies]
-uefi = { version = "0.26.0", default-features = false, features = [ "alloc", "global_allocator" ] }
-uefi-services = { version = "0.23.0", default-features = false, features = [ "panic_handler", "logger" ] }
+uefi = { version = "0.27.0", default-features = false, features = [ "alloc", "global_allocator" ] }
+uefi-services = { version = "0.24.0", default-features = false, features = [ "panic_handler", "logger" ] }
 # Even in debug builds, we don't enable the debug logs, because they generate a lot of spam from goblin.
 log = { version = "0.4.21", default-features = false, features = [ "max_level_info", "release_max_level_warn" ]}
 # Use software implementation because the UEFI target seems to need it.