If I'm not mistaken, that's not the case -- as far as I can tell, any given
gitian-build descriptor will get files from 2 potential sources. One is the
remotes section, which specifies git repositories that should be
downloaded, and the other is the files section, which lists files from the
inputs directory that should be copied in. These wgets pull in the source
that is used to build the deps. A quick look at the descriptor files, and I
see no URLs there besides github.com/bitcoin/bitcoin.

On Tuesday, September 24, 2013, Philip Kaufmann wrote:

> In doc/release-process.md:
>
> > @@ -39,11 +42,11 @@ Release Process
> >  	wget 'http://miniupnp.free.fr/files/download.php?file=miniupnpc-1.6.tar.gz' -O miniupnpc-1.6.tar.gz
> >  	wget 'http://www.openssl.org/source/openssl-1.0.1c.tar.gz'
> >  	wget 'http://download.oracle.com/berkeley-db/db-4.8.30.NC.tar.gz'
> > -	wget 'http://zlib.net/zlib-1.2.6.tar.gz'
> > -	wget 'ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng-1.5.9.tar.gz'
> > +	wget 'ftp://ftp.simplesystems.org/pub/libpng/png/src/history/zlib/zlib-1.2.6.tar.gz'
>
> AFAIK you shouldn't just update such links only here, they are used in the
> Gitian related files also (see folder gitian-descriptors).
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/bitcoin/bitcoin/pull/3028/files#r6556043>
> .
>