A log4j security update has been released for CentOS 7.

CESA-2021:5206 Moderate CentOS 7 log4j Security Update

CentOS Errata and Security Advisory 2021:5206 Moderate

Upstream details at :   https://access.redhat.com/errata/RHSA-2021:5206

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

x86_64:
cbc27f39937173e8134e59deb6baac91cea3e9497f76d2e139b4eb64bc1aade3 log4j-1.2.17-17.el7_4.noarch.rpm
9c006d26a3fc490337a403596c661c5f56ddf827bc6cbd0f2da8d9f0c325eeb9 log4j-javadoc-1.2.17-17.el7_4.noarch.rpm
6f168ecee0a2bbae92e0564565c3d22e1bae72f64557c32569a7bffd94b76ca4 log4j-manual-1.2.17-17.el7_4.noarch.rpm

Source:
bf4b560a10d0de496a8506c2f30116b123a5423345422da9eb2369a56655d13b log4j-1.2.17-17.el7_4.src.rpm