Fix updating of the tarball mirror

(cherry picked from commit 7a51e17775a42388930cd19e1d037812b07a0f37)
fetchurl: Ensure that ‘urls’ is a list

(cherry picked from commit 83ca2c272a8952828f17c5aa8f918561ca798f8a)