[1] Here is the 7.9 openssl and expat CVE fix info, which is shipped live:

• * openssl: https://errata.devel.redhat.com/advisory/92249 - openssl-1.0.2k-25.el7_9
• expat: https://errata.devel.redhat.com/advisory/92151 - expat-2.1.0-14.el7_9

[2] Here are the updated 7.9 base image errata with expat and openssl fixes.  This info is also in the tracker doc [3]. * Rhel-server: https://errata.devel.redhat.com/advisory/92480

• Rhel7-atomic (minimal) https://errata.devel.redhat.com/advisory/92482
• Rhel7-init: https://errata.devel.redhat.com/advisory/92483
• Ubi7: https://errata.devel.redhat.com/advisory/92489
• Ubi7-minimal:https://errata.devel.redhat.com/advisory/92491
• Ubi7-init: https://errata.devel.redhat.com/advisory/92490

AMQ Interconnect and Cert Manager base images impacted and require an update.