A java-1.7.0-openjdk security update has been released for CentOS 7.

CentOS-announce: CESA-2020:1507 Important CentOS 7 java-1.7.0-openjdk Security Update

CentOS Errata and Security Advisory 2020:1507 Important

Upstream details at :   https://access.redhat.com/errata/RHSA-2020:1507

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

x86_64:
fabe67fc9df555934da2d72279096fd3c24b3e2ff47850f5896505890f38a0a4 java-1.7.0-openjdk-1.7.0.261-2.6.22.2.el7_8.x86_64.rpm
03c15876c6039d9417ee91cd8c126e85728890c0197caf2eabe8ead3f490ede3 java-1.7.0-openjdk-accessibility-1.7.0.261-2.6.22.2.el7_8.x86_64.rpm
7575efaca8e9a5cf4f0a1e2248ccae845d3e59aaf7ae927486d923a3546dd141 java-1.7.0-openjdk-demo-1.7.0.261-2.6.22.2.el7_8.x86_64.rpm
2cbb801428afc2eb0a923e443936b9a998896d3b6b34a69344eafd09c4d900af java-1.7.0-openjdk-devel-1.7.0.261-2.6.22.2.el7_8.x86_64.rpm
91d7ddde31bd7f6dee89c8e4c710bf889e2f6e0dadb253de44f76a18c71fbd65 java-1.7.0-openjdk-headless-1.7.0.261-2.6.22.2.el7_8.x86_64.rpm
4116eb9fadf6555249e648b54b721e40488fd224f7f2c3c1ff3a97124b66a2fe java-1.7.0-openjdk-javadoc-1.7.0.261-2.6.22.2.el7_8.noarch.rpm
7b6b6a78638df33409453224096ef0e0201774bc67bdd1d5016f52b034f97e19 java-1.7.0-openjdk-src-1.7.0.261-2.6.22.2.el7_8.x86_64.rpm

Source:
13bcf8e890d357b8d0963724df486217403817c19c2ac0c424513440296a4b99 java-1.7.0-openjdk-1.7.0.261-2.6.22.2.el7_8.src.rpm