diff --git a/lib/utils.pm b/lib/utils.pm
index 9a3324ef..69c82da7 100644
--- a/lib/utils.pm
+++ b/lib/utils.pm
@@ -441,8 +441,9 @@ sub setup_workaround_repo {
     my %workarounds = (
         "30" => [""],
         "31" => [""],
-        # fix for lmod breaking console output tests
-        "32" => ["FEDORA-2020-755d29d4b0"]
+        # fix for lmod breaking console output tests, latest pki to
+        # avoid broken FreeIPA upgrades (it can't go backwards)
+        "32" => ["FEDORA-2020-755d29d4b0", "FEDORA-2020-5f05c3ec46"]
     );
     # then we'll download each update for our release:
     my $advisories = $workarounds{$version};