diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-11-30-CVE-2020-14040.md b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-11-30-CVE-2020-14040.md
new file mode 100644
index 0000000000..030eafeea8
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/changelog/security/2021-11-30-CVE-2020-14040.md
@@ -0,0 +1 @@
+- [CVE-2020-14040](https://nvd.nist.gov/vuln/detail/CVE-2020-14040)
diff --git a/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/ignition-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/ignition-9999.ebuild
index 8ed203ba0d..923cbced18 100644
--- a/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/ignition-9999.ebuild
+++ b/sdk_container/src/third_party/coreos-overlay/sys-apps/ignition/ignition-9999.ebuild
@@ -12,7 +12,7 @@ inherit coreos-go cros-workon systemd udev
 if [[ "${PV}" == 9999 ]]; then
 	KEYWORDS="~amd64 ~arm64"
 else
-	CROS_WORKON_COMMIT="eda58aa14fd65e19d7f117aaa5fc97e3d995c277" # flatcar-master
+	CROS_WORKON_COMMIT="6d7b4401700c76492c8627030d9dde147f81d5cf" # flatcar-master
 	KEYWORDS="amd64 arm64"
 fi