crates.io/nitro-tpm-pcr-compute: medium 6

nitro-tpm-pcr-compute may allow kernel command line modification by an account operator

Action: Upgrade nitro-tpm-pcr-compute to 1.1.0 or later.

cargo update -p nitro-tpm-pcr-compute --precise 1.1.0

Affected

Fixed versions

Sources

• osv: GHSA-xrv8-2pf5-f3q7
• https://github.com/aws/nitrotpm-attestation-samples/security/advisories/GHSA-xrv8-2pf5-f3q7
• https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/attestable-ami.html
• https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html
• https://github.com/aws/NitroTPM-Tools
• https://github.com/aws/NitroTPM-Tools/blob/main/CHANGELOG.md
• https://github.com/aws/NitroTPM-Tools/releases/tag/v1.1.0
• https://github.com/aws/nitrotpm-attestation-samples
• https://www.freedesktop.org/software/systemd/man/latest/systemd-stub.html

published 2025-12-05T18:57:55Z · modified 2025-12-05T19:09:38.158008Z · JSON