diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 5f2bf1a0be..82077d5266 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -86,12 +86,6 @@ dev-util/checkbashisms
 # this version does not segfault when a user isn't in sudoers
 =app-admin/sudo-1.8.10_p2
 
-# Security updates, CVE-2014-3508, CVE-2014-5139, CVE-2014-3509,
-# CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511,
-# and CVE-2014-3512
-# https://bugs.gentoo.org/show_bug.cgi?id=519264
-=dev-libs/openssl-1.0.1i
-
 # Includes fix for checking mount status of loop devices
 =sys-fs/btrfs-progs-3.14_pre20140414
 
@@ -108,3 +102,8 @@ dev-util/checkbashisms
 =sys-boot/grub-2.02_beta2
 # current stable xen-tools doesn't build without multilib
 =app-emulation/xen-tools-4.4.0-r9
+
+# Security update, Gentoo hasn't finished marking it stable yet.
+# https://www.openssl.org/news/secadv_20141015.txt
+# https://bugs.gentoo.org/show_bug.cgi?id=525468
+=dev-libs/openssl-1.0.1j