--- PKGBUILD.orig	2015-07-27 03:02:37.074535837 +0200
+++ PKGBUILD	2015-07-27 03:08:14.001071086 +0200
@@ -9,7 +9,7 @@
 license=('custom:GPL/BSD')
 depends=('glibc' 'libpcap>=1.0.0')
 backup=(etc/ppp/{chap-secrets,pap-secrets,options,ip-up,ip-down,ip-down.d/00-dns.sh,ip-up.d/00-dns.sh,ipv6-up.d/00-iface-config.sh})
-source=(ftp://ftp.samba.org/pub/ppp/ppp-${pkgver}.tar.gz{,.asc}
+source=(https://download.samba.org/pub/ppp/ppp-${pkgver}.tar.gz{,.asc}
         ppp-2.4.6-makefiles.patch
         options
         ip-up
@@ -19,7 +19,8 @@
         ipv6-up
         ipv6-down
         ipv6-up.d.iface-config.sh
-        ppp.systemd)
+        ppp.systemd
+        CVE-2015-3310.diff)
 sha256sums=('02e0a3dd3e4799e33103f70ec7df75348c8540966ee7c948e4ed8a42bbccfb30'
             'SKIP'
             'f04f47318226c79594f45b8b75877c30710d22fe0fb1e2e17db3b4257dc4218c'
@@ -31,12 +32,16 @@
             'bb3f44a4f2c4b8dbe7f84d77feae90a71caa9fa3c252a20c390e015d4f8ea248'
             '77292b79f99f97a01aa9a75cd7cd93da70d746d3b8cc60f35b31dfe0568544c0'
             '20780cf4bd0774bebb55ecb3bdae7667c9ae5cbe003a52a1ecb0bbc77d46260f'
-            'eb8ab2e2d71c3bb9c4297cf847b6e9d52616a3fdbf2257c479cc43dff318c831')
+            'eb8ab2e2d71c3bb9c4297cf847b6e9d52616a3fdbf2257c479cc43dff318c831'
+            'f0fe7e7d9b35141c2565a09e39c4f66b475ed3fe8e2528d10faa4412f480e338')
+validpgpkeys=('631E179E370CD727A7F2A33A9E4295D605F66CE9') # Paul Mackerras (Signing key) <paulus@samba.org>
 
 prepare() {
   cd "${srcdir}/${pkgname}-${pkgver}"
 
   patch -p1 -i "${srcdir}/ppp-2.4.6-makefiles.patch"
+  patch -p1 -i "${srcdir}/CVE-2015-3310.diff"
+
   # enable active filter
   sed -i "s:^#FILTER=y:FILTER=y:" pppd/Makefile.linux
   # enable ipv6 support