Bug#627567: Auto-updates from non-Debian source

[Ben Hutchings]

Package: vuze
Version: 4.3.0.6-2
Severity: serious

In the default configuration, Vuze appears to download updates for the
packaged plugins from upstream into the user's home directory.
Packages should not update themselves automatically but should leave
this to the package manager.  Of course, plugins that *aren't* part of
the package could be updated in this way.

Ben.

-- System Information:
Debian Release: wheezy/sid
  APT prefers proposed-updates
  APT policy: (500, 'proposed-updates'), (500, 'oldstable-proposed-updates'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (x86_64)

Kernel: Linux 2.6.38-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages vuze depends on:
ii  azureus                       4.3.0.6-2  BitTorrent client
ii  libswt-cairo-gtk-3.6-jni      3.6.2-1    Standard Widget Toolkit for GTK+ C
ii  libswt-gnome-gtk-3.6-jni      3.6.2-1    Standard Widget Toolkit for GTK+ G
ii  libswt-mozilla-gtk-3.6-jni    3.6.2-1    Standard Widget Toolkit for GTK+ M

vuze recommends no packages.

vuze suggests no packages.

-- no debconf information