I tend to do manual updates on my sites. For some reason I sometimes see references to attempts to access an update.xml file in our server wide tmp folder. As we don't generally allow access to the tmp folder itself, this is not good.
I don't see where this location can be configured anywhere...
David