A libarchive security update has been released for CentOS 7.

CentOS Errata and Security Advisory 2020:0203 Important

Upstream details at :   https://access.redhat.com/errata/RHSA-2020:0203

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

x86_64:
67b204db1b3c2174656dfb95b88b93b80586abbc26efa6fc2ff58e385106f076 bsdcpio-3.1.2-14.el7_7.x86_64.rpm
89208eec521abee72a76bed88812b215371a02de38c5e6c438ecda3aff7adf45 bsdtar-3.1.2-14.el7_7.x86_64.rpm
96d1410b03acd27790d6cdfc9b8622c7cf331e4c6e747ad91117914a533b5ebc libarchive-3.1.2-14.el7_7.i686.rpm
1a66ff826c1898d606570208e92fb71c18e35a376151b91c860cbc295efb9733 libarchive-3.1.2-14.el7_7.x86_64.rpm
9fb64954aa54d13e1b694ed8543cd1641be6cfda2d660963fbfd111b4f3a8396 libarchive-devel-3.1.2-14.el7_7.i686.rpm
d818acd1870806fbf7dc52141e1c0264cb061ad8f77ce62244e28626116810c1 libarchive-devel-3.1.2-14.el7_7.x86_64.rpm

Source:
1186a66de2849483ae9c5f33cd9b2aa2d44a860c95f7a258870fdafb1c92a581 libarchive-3.1.2-14.el7_7.src.rpm