popt: bump version, use alternative upstream location

Closes #3643

rpm5.org seems to be gone/down, so use linuxfromscratch mirror instead.

Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>