diff --git a/bzip2/pkg.yaml b/bzip2/pkg.yaml
index f8a0087..cf80fdc 100644
--- a/bzip2/pkg.yaml
+++ b/bzip2/pkg.yaml
@@ -3,7 +3,7 @@ dependencies:
   - stage: base
 steps:
   - sources:
-      - url: https://sourceware.org/pub/bzip2/bzip2-1.0.8.tar.gz
+      - url: http://deb.debian.org/debian/pool/main/b/bzip2/bzip2_1.0.8.orig.tar.gz
         destination: bzip2.tar.gz
         sha256: ab5a03176ee106d3f0fa90e381da478ddae405918153cca248e682cd0c4a2269
         sha512: 083f5e675d73f3233c7930ebe20425a533feedeaaa9d8cc86831312a6581cefbe6ed0d08d2fa89be81082f2a5abdabca8b3c080bf97218a1bd59dc118a30b9f3
diff --git a/elfutils/pkg.yaml b/elfutils/pkg.yaml
index cbc4105..7fe475a 100644
--- a/elfutils/pkg.yaml
+++ b/elfutils/pkg.yaml
@@ -10,10 +10,10 @@ dependencies:
   - stage: automake
 steps:
   - sources:
-      - url: https://sourceware.org/ftp/elfutils/0.173/elfutils-0.173.tar.bz2
+      - url: http://deb.debian.org/debian/pool/main/e/elfutils/elfutils_0.176.orig.tar.bz2
         destination: elfutils.tar.bz2
-        sha256: b76d8c133f68dad46250f5c223482c8299d454a69430d9aa5c19123345a000ff
-        sha512: 7f38e4ce2098b685f15030bf01f0a66a74aa32fbfcead0304c1d0e0a929b348a72f99e685cd4605465f4337393382112f64b8847e6c2f7cc1a57a4fd03d03eb3
+        sha256: eb5747c371b0af0f71e86215a5ebb88728533c3a104a43d4231963f308cd1023
+        sha512: 7f032913be363a43229ded85d495dcf7542b3c85974aaaba0d984228dc9ac1721da3dc388d3fa02325a80940161db7e9ad2c9e4521a424ad8a7d050c0902915b
     prepare:
       - |
         tar -xjf elfutils.tar.bz2 --strip-components=1
diff --git a/golang/golang/pkg.yaml b/golang/golang/pkg.yaml
index 0fa993a..466f848 100644
--- a/golang/golang/pkg.yaml
+++ b/golang/golang/pkg.yaml
@@ -4,10 +4,10 @@ dependencies:
   - stage: golang-bootstrap
 steps:
   - sources:
-      - url: https://dl.google.com/go/go1.14.src.tar.gz
+      - url: https://dl.google.com/go/go1.14.1.src.tar.gz
         destination: go.src.tar.gz
-        sha256: 6d643e46ad565058c7a39dac01144172ef9bd476521f42148be59249e4b74389
-        sha512: b04f2a90b9693f2c7a0b5c7048f186318937f3dd3831162c4130d88e2b185a5047db15e284041c70f1f42da512f42e5e85c13256018982cf2739244a31874328
+        sha256: 2ad2572115b0d1b4cb4c138e6b3a31cee6294cb48af75ee86bec3dca04507676
+        sha512: f0112fbf984e2764cd90d42b2f844b986b421adf8bf68551cccefeb320db7f3490ab1532f770f20c943c68c7185ce139c8248991adb0529527358ffdc8047ad9
 
     env:
       GOROOT_BOOTSTRAP: '{{ .TOOLCHAIN }}/go_bootstrap'