Download Information

Installer Package Details

Apple Knowledgebase Info

The following improvements apply to both Intel- and PowerPC-based Macs unless otherwise noted:

.Mac

• Improves automatic iDisk syncing for customers whose .Mac username contains a period (.).
• Improves overall .Mac Sync performance.
• Addresses an issue with automatic and periodic syncing as set in the .Mac System Preferences panel.
• Reduces .Mac Sync timeouts when syncing large data sets.
• Prevents large amounts of Address Book data from being changed without authorization.
• Addresses an issue which could result in properly unregistering a computer.
• Addresses issues related to syncing a large number of changes to .Mac
• Prevents third-party syncing applications from presenting an extraneous initial sync alert.
  
  

Bluetooth

• Addresses a wake-from-sleep issue for Kensington PilotMouse Mini Bluetooth devices when used with a MacBook.
• Resolves issues in which Bluetooth-based devices might not respond after sleep on some computers.

iChat, iCal, and iSync

• Resolves an issue in which iCal reminders may appear off to the side of the screen.
• Resolves an issues in which some events added to particular dates may not display correctly.
• Event notes are now synced between iCal and Nokia N70 phones.
• Adds iSync support for more devices.
• Includes iChat support for USB Video Class webcams.

• Addresses a permissions issue when copying a file with extended attributes from an AFP share of an Xsan volume, via the Finder.
  
• Resolves an issue when using kerberos authentication with Active Directory if the user is a member of many groups.
  
• Resolves performance issues with Intel-based iMacs that could occur when determining high-speed network switches.
• Improves reliability when faxing in France or Belgium via an external Apple USB Modem.
• Adds support for WPA2 encryption in Network Diagnostics.
  
• Addresses an issue with automatic AirPort connections that use different authentication methods.
• Addresses an issue in which Network Preferences may unexpectedly quit after disconnecting a network-aware USB device while Network Preferences is open.
  
• Addresses an issue with iMac's maintaining manual duplex settings.
• Internal Apple modem drivers now offer the same robustness as external Apple modem drivers.
  
• External USB modems now report DLE-d for busy tone detection.
  
• Adds modem support for Russia.
  
• Fax receiving now works when the country code is set to France.
  
• Resolves an issue with dialing a modem in pulse mode to an ISP.
  
• Resolves an issue in the Open dialog when browsing AFP volumes within applications using Rosetta.
  
• Resolves a printing issue that could occur with applications using Rosetta, while logged in as Active Directory User that has an SMB home directory.
  

• Resolves a printing issue with applications using Rosetta while logged in as an Active Directory User with SMB home directory.
• Resolves an issue in which temporary files might use excessive disk space when printing to some third-party printers.
  

Aperture

For information on the benefits this update includes for Aperture, see this article.

Third-party

• Resolves issues for these third-party applications that use Rosetta: LEGO StarWars, Adobe InDesign, H&R Block TaxCut, Big Business' Big Business 5.1.0.
• Resolves an issue in which Adobe Arno Pro Italics fonts might not install in Font Book.
  
• Resolves an issue for Microsoft Word in which OpenType Fonts may not display correctly; this update also addresses OpenType font issues using Word 2004.
  

 Other

• Improves the reliability of OpenGL-accelerated graphics in Blizzard's World of Warcraft.
  
• Improves the reliability of OpenGL-based applications on Mac Pro computer with Nvidia graphics cards.
  
• Includes updated security certificates.
• Includes the Daylight Savings Time Update (released February 15, 2007) which contains the latest worldwide time zone and Daylight Saving Time (DST) rules as of January 8, 2007.
  
• Resolves a toggling issue when zooming using the Command-Alt-8 key combination (Universal Access).
  
• Resolves an issue in which some USB printers may stop printing in Classic.
• Addresses an issue in Classic in which an iMac G5's built-in iSight camera might stop responding.
  
• Improves validation of disk images.
• Includes improved support for USB devices in Classic.
• Improves support for files with ".ac3", ".m2v", and ".m4v" filename extensions.
• Improves performance when transferring from a P2 USB reader in the Finder.
  
• Resolves an issue in which DVD player might not play a track that's longer than 3 hours.
  
• Addresses a display issue that could occur in X11.app running in 256-color mode on an Intel-based Mac.
  
• Addresses EAP-FAST in PAC mode issue in a TLS session.
• Addresses an issue in which incorrect encoding could be used for the files created by the “New Text File” Automator action on Intel-based Macs.
  
• Includes recent Apple security updates.
  
  

Additional installation scripts

Preflight scripts

servicesfix_pre

#!/bin/sh 



# 4665091



cd "$3/System/Library/LaunchDaemons"

ls | sed 's,\.plist$,,g' | while read

do

if [ -e "$3/System/Library/LaunchDaemons/${REPLY}.plist" ] ; then

var=`defaults read "$3/System/Library/LaunchDaemons/${REPLY}" Disabled 2>/dev/null`

if [ $? != 0 ] || [ "$var" == "0" ] ; then

/usr/bin/touch "${INSTALLER_TEMP}/${REPLY}.enabled"

fi

fi

done

createPatchToolSymLink

#!/bin/sh

# 4115067



TARG="$3"



if [ ! -e "$TARG/usr/bin/bspatch_apple" ] ; then

echo "restoring bspatch_apple symlink"

cd "$TARG/usr/bin"

/bin/ln -s bspatch bspatch_apple

fi

removeBrokenFontBook.sh

#!/bin/sh

if [ -e "$3/Applications/Font Book.app" ] && [ ! -e "$3/Applications/Font Book.app/Contents/Resources/English.lproj/InfoPlist.strings" ]; then

/bin/rm -rf "$3/Applications/Font Book.app"

fi

exit

createDNISymlink

	#!/bin/sh

if [ -e "$3/var/run/DoNotInstall" ]; then

/bin/rm -f "$3/var/run/DoNotInstall"

fi

if [ "${INSTALLER_TEMP}" = "" ]; then

echo "Temporary directory not ready."

exit

fi

TEMPDIR=`/usr/bin/mktemp -d "${INSTALLER_TEMP}/DoNotInstall.XXXXXX"`

if [ $? = 0 ]; then

/bin/ln -s "${TEMPDIR}" "$3/var/run/DoNotInstall"

fi

prebindFix

#!/bin/sh

# 4421824



# flush cache if installing to startup volume

if [ "$3" = "/" ]; then

/usr/libexec/oah/translate -prebindOAH

fi

Postflight scripts

servicefix_Post

#!/bin/bash 



# 4665091



cd "$3/System/Library/LaunchDaemons"

ls | sed 's,\.plist$,,g' | while read

do

if [ -e "${INSTALLER_TEMP}/${REPLY}.enabled" ] ; then

var=`defaults read "$3/System/Library/LaunchDaemons/${REPLY}" Disabled 2>/dev/null`

if [ "$var" == "1" ] ; then

"$1/Contents/Resources/PlistBuddy" -c "Delete Disabled" "$3/System/Library/LaunchDaemons/${REPLY}.plist"

fi

fi

done

tweakperms

#!/bin/sh

# 4125468, 4125467, 4525305



/bin/chmod 755 "$3/System/Library/Caches"

/bin/chmod 755 "$3/Library/Widgets"



exit 0

activateEFI

#!/bin/sh

# 4428916



if [ -f "$3/usr/standalone/i386/boot.efi" ]; then

/usr/sbin/bless --folder "$3/System/Library/CoreServices" --bootinfo --bootefi

fi

hidefiles

#!/usr/bin/perl

# 4107497



system($ARGV[0] . "/Contents/Resources/SetFile","-a","V",$ARGV[2] . "/mach_kernel");



exit(0);

touchCoreTypes.sh

	#!/bin/sh

# 4724022

/usr/bin/touch "$3/System/Library/CoreServices/CoreTypes.bundle"

destroyDNISymlink

#!/bin/sh

if [ -e "$3/var/run/DoNotInstall" ]; then

rm -f "$3/var/run/DoNotInstall"

fi

disable-samba-spinlocks

	#! /bin/bash

TARGET=$3

LAUNCHCTL=/bin/launchctl

SERVERADMIN=/usr/sbin/serveradmin

GREP=/usr/bin/grep

XXD=/usr/bin/xxd

KILLALL=/usr/bin/killall

if [ "$TARGET" = "" ]; then

echo \$TARGET must be set

exit 1

fi

# If we are not installing to /, we don't need to suspend any services, but

# we still might have to fix up the TDB files.

if [ "$TARGET" != "/" ]; then

KILLALL=true

LAUNCHCTL=true

SERVERADMIN=true

else

if [ -x $SERVERADMIN ]; then

# On Server, the "smb" service handles both smbd and nmbd

SERVICES=smb

else

# On Desktop, we need separate service name for every launchd task

SERVICES="smbd nmbd swat"

fi

fi

RUNNING=""

stop_service()

{

service=$1

if [ -x $SERVERADMIN ]; then

$SERVERADMIN stop $service

else

$LAUNCHCTL stop org.samba.$service

$LAUNCHCTL unload /System/Library/LaunchDaemons/$service.plist

fi

}

start_service()

{

service=$1

if [ -x $SERVERADMIN ]; then

$SERVERADMIN start $1

else

$LAUNCHCTL load /System/Library/LaunchDaemons/$service.plist

fi

}

running_service()

{

service=$1

if [ -x $SERVERADMIN ]; then

# serveradmin output for a running process is

#       smb:state = "RUNNING"

state=$(

$SERVERADMIN status $1 | \

perl -ne "/$service:state = \"(.+)\"/ && print \"\$1\n\";"

)

[[ "$state" = "RUNNING" ]]

else

# WARNING: The grep will hang unless launchctl is run as root.

$LAUNCHCTL list | $GREP -q org.samba.$service

fi

}

if [ "$TARGET" == "/" ]; then

for s in $SERVICES ; do

if running_service $s ; then

RUNNING="$RUNNING $s"

fi

done

for s in $RUNNING ; do

stop_service $s

done

# Irrespective of whether the tools said they were running, we need to

# make doubly sure that these processes are stopped.

for pass in 1 2 ; do

$KILLALL -TERM smbd nmbd swat

sleep 1

done

fi

find "$TARGET/var/db/samba" "$TARGET/var/samba" -name \*.tdb | while read tdb ; do

echo '0000028: 0000 0000' | $XXD -r - "$tdb"

done

if [ "$TARGET" == "/" ]; then

for s in $RUNNING ; do

start_service $s

done

fi	

buildKeychains

	#!/bin/sh

# 4522269, 4137717, 4319347

# must be run chrooted to the target disk

DEVMOUNT_CALLED=0

SECURITYD_LAUNCHED=0

if [ "$3" != "/" ]; then

/sbin/mount_devfs devfs /dev

DEVMOUNT_CALLED=1

fi

if [ `/bin/ps auxww |/usr/bin/grep securityd |/usr/bin/grep -v grep | wc -l` == 0 ]; then 

/usr/sbin/securityd -X

SECURITYD_LAUNCHED=1

fi	

if [ ! -f /Library/Keychains/System.keychain ]; then

if [ ! -d /Library/Keychains ]; then

/bin/mkdir -p /Library/Keychains

/usr/sbin/chown root:admin /Library/Keychains

/bin/chmod 755 /Library/Keychains

fi

sleep 2       # give SecurityServer a chance to come up

/usr/sbin/systemkeychain -C

fi

if [ ! -f "/System/Library/Keychains/X509Anchors" ]; then

"/usr/bin/security" create-keychain -p X509Anchors "/System/Library/Keychains/X509Anchors"

fi

if [ ! -f "/System/Library/Keychains/X509Certificates" ]; then

"/usr/bin/security" create-keychain -p X509Certificates "/System/Library/Keychains/X509Certificates"

fi

if [ -d "/System/Library/Keychains/Anchors" ]; then

cd "/System/Library/Keychains/Anchors/"

"/usr/bin/security" add-certificate -k "/System/Library/Keychains/X509Anchors" *

/bin/rm -rf "/System/Library/Keychains/Anchors"

fi

if [ -d "/System/Library/Keychains/Certificates" ]; then

cd "/System/Library/Keychains/Certificates/"

"/usr/bin/security" add-certificate -k "/System/Library/Keychains/X509Certificates" *

/bin/rm -rf "/System/Library/Keychains/Certificates"

fi

if [ $SECURITYD_LAUNCHED -eq 1 ]; then

for SECURITY_PID in `/bin/ps auxww |/usr/bin/grep securityd |/usr/bin/grep -v grep|/usr/bin/awk '{print $2;}'`

do

/bin/kill $SECURITY_PID >/dev/null 2>&1

done>&

if [ $DEVMOUNT_CALLED -eq 1 ]; then

/sbin/umount /dev

fi

removeTransDaemon.sh

#!/bin/sh

# 4892533

if [ -e "$3/etc/mach_init.d/translated.plist" ]; then

/bin/rm -rf "$3/etc/mach_init.d/translated.plist"

fi

if [ -e "$3/usr/libexec/oah/translated" ]; then

/bin/rm -rf "$3/usr/libexec/oah/translated"

fi

fixSSHcfgs.pl

	#!/usr/bin/perl

my $TARGET = "$ARGV[2]";

my $SSH_FILE1 = "$TARGET/etc/ssh_config";

my $SSH_FILE2 = "$TARGET/etc/sshd_config";

my $TMP_FILE1 = "$ENV{'INSTALLER_TEMP'}/ssh_config";

my $TMP_FILE2 = "$ENV{'INSTALLER_TEMP'}/sshd_config";

open(AUTHFILE, "< $SSH_FILE1");

while(  ) {

if( m/Tunnel\s+no/ ) {

$p1Exists = 1;

}

if( m/TunnelDevice\s+any:any/ ) {

$p2Exists = 1;

}

if( m/PermitLocalCommand\s+no/ ) {

$p3Exists = 1;

}

if( m/GSSAPIAuthentication/i ) {

$gs1Exists = 1;

}

if( m/GSSAPIDelegateCredentials/i ) {

$gs2Exists = 1;

}

if( m/GSSAPIKeyExchange/i ) {

$gs3Exists = 1;

}

if( m/GSSAPITrustDNS/i ) {

$gs4Exists = 1;

}

}

close (AUTHFILE);

open (AUTHFILE, "< $SSH_FILE1");

open(OUTFILE, "> $TMP_FILE1");

$doneBlock = 0;

$doneGS = 0;

while (  ) {

if (!$doneBlock && m/EscapeChar/i ) {

print OUTFILE $_;

if (!$p1Exists) {

print OUTFILE "#   Tunnel no\n";

}

if (!$p2Exists) {

print OUTFILE "#   TunnelDevice any:any\n";

}

if (!$p3Exists) {

print OUTFILE "#   PermitLocalCommand no\n";

}

$doneBlock = 1;

}

elsif (!$doneGS && m/GSSAPIAuthentication/i ) {

print OUTFILE $_;

if (!$gs2Exists) {

print OUTFILE "#   GSSAPIDelegateCredentials no\n";

}

if (!$gs3Exists) {

print OUTFILE "#   GSSAPIKeyExchange yes\n";

}

if (!$gs4Exists) {

print OUTFILE "#   GSSAPITrustDNS no\n";

}

$doneGS = 1;

}

elsif (!$doneGS && m/GSSAPIDelegateCredentials/i ) {

print OUTFILE $_;

if (!$gs1Exists) {

print OUTFILE "#   GSSAPIAuthentication yes\n";

}

if (!$gs3Exists) {

print OUTFILE "#   GSSAPIKeyExchange yes\n";

}

if (!$gs4Exists) {

print OUTFILE "#   GSSAPITrustDNS no\n";

}

$doneGS = 1;

}

elsif (!$doneGS && m/GSSAPIKeyExchange/i ) {

print OUTFILE $_;

if (!$gs1Exists) {

print OUTFILE "#   GSSAPIAuthentication yes\n";

}

if (!$gs2Exists) {

print OUTFILE "#   GSSAPIDelegateCredentials no\n";

}

if (!$gs4Exists) {

print OUTFILE "#   GSSAPITrustDNS no\n";

}

$doneGS = 1;

}

elsif (!$doneGS && m/GSSAPITrustDNS/i ) {

print OUTFILE $_;

if (!$gs1Exists) {

print OUTFILE "#   GSSAPIAuthentication yes\n";

}

if (!$gs2Exists) {

print OUTFILE "#   GSSAPIDelegateCredentials no\n";

}

if (!$gs3Exists) {

print OUTFILE "#   GSSAPIKeyExchange yes\n";

}

$doneGS = 1;

}

elsif (!$doneGS && m/HostbasedAuthentication/i ) {

print OUTFILE $_;

if (!$gs1Exists) {

print OUTFILE "#   GSSAPIAuthentication yes\n";

}

if (!$gs2Exists) {

print OUTFILE "#   GSSAPIDelegateCredentials no\n";

}

if (!$gs3Exists) {

print OUTFILE "#   GSSAPIKeyExchange yes\n";

}

if (!$gs4Exists) {

print OUTFILE "#   GSSAPITrustDNS no\n";

}

$doneGS = 1;

}

else {

print OUTFILE $_;

}

}

if (!$doneGS) {

if (!$gs1Exists) {

print OUTFILE "#   GSSAPIAuthentication yes\n";

}

if (!$gs2Exists) {

print OUTFILE "#   GSSAPIDelegateCredentials no\n";

}

if (!$gs3Exists) {

print OUTFILE "#   GSSAPIKeyExchange yes\n";

}

if (!$gs4Exists) {

print OUTFILE "#   GSSAPITrustDNS no\n";

}

}

close(OUTFILE);

close(AUTHFILE);

open(AUTHFILE, "< $SSH_FILE2");

while(  ) {

if( m/AddressFamily/i ) {

$p4Exists = 1;

}

if( m/\#\s*SyslogFacility\s+AUTH/i ) {

$p5Change = 1;

}

if( m/MaxAuthTries/i ) {

$p6Exists = 1;

}

if( m/\#\s*Compression\s+yes/i ) {

$p7Change = 1;

}

if( m/PermitTunnel/i ) {

$p8Exists = 1;

}

if( m/Example\s+of\s+overriding\s+settings\s+on\s+a\s+per-user\s+basis/i ) {

$p9Exists = 1;

}

if( m/GSSAPIAuthentication/i ) {

$gs5Exists = 1;

}

if( m/GSSAPICleanupCredentials/i ) {

$gs6Exists = 1;

}

if( m/GSSAPIStrictAcceptorCheck/i ) {

$gs7Exists = 1;

}

if( m/GSSAPIKeyExchange/i ) {

$gs8Exists = 1;

}

if( m/GSSAPI\s+options/i ) {

$gsOptExists = 1;

}

}

close (AUTHFILE);

open (AUTHFILE, "< $SSH_FILE2");

open(OUTFILE, "> $TMP_FILE2");

$doneGS = 0;

$done4 = 0;

$done5 = 0;

$done6 = 0;

$done7 = 0;

$done8 = 0;

$done9 = 0;

$gsOptExists = 0;

while (  ) {

if ( !$done4 && (m/Protocol/i)) {

print OUTFILE $_;

if (!$p4Exists) {

print OUTFILE "#AddressFamily any\n";

}

$done4 = 1;

}

elsif (!$done5 && m/SyslogFacility/i ) {

if ($p5Change) {

print OUTFILE "SyslogFacility AUTHPRIV\n";

}

else {

print OUTFILE $_;

}

$done5 = 1;

}

elsif (!$done6 && m/StrictModes/i ) {

print OUTFILE $_;

if (!$p6Exists) {

print OUTFILE "#MaxAuthTries 6\n";

}

$done6 = 1;

}

elsif (!$done7 && m/Compression/i ) {

if ($p7Change) {

print OUTFILE "#Compression delayed\n";

}

else {

print OUTFILE $_;

}

$done7 = 1;

}

elsif (!$done8 && m/MaxStartups/i ) {

print OUTFILE $_;

if (!$p8Exists) {

print OUTFILE "#PermitTunnel no\n";

}

$done8 = 1;

}

elsif ( !$doneGS && (m/GSSAPIAuthentication/i)) {

if (!$gsOptExists) {

print "\n";

print OUTFILE "# GSSAPI options\n";

}

print OUTFILE $_;

if (!$gs6Exists) {

print OUTFILE "#GSSAPICleanupCredentials yes\n";

}

if (!$gs7Exists) {

print OUTFILE "#GSSAPIStrictAcceptorCheck yes\n";

}

if (!$gs8Exists) {

print OUTFILE "#GSSAPIKeyExchange yes\n";

}

$doneGS = 1;

}

elsif ( !$doneGS && (m/GSSAPICleanupCredentials/i)) {

if (!$gsOptExists) {

print "\n";

print OUTFILE "# GSSAPI options\n";

}

print OUTFILE $_;

if (!$gs5Exists) {

print OUTFILE "#GSSAPIAuthentication yes\n";

}

if (!$gs7Exists) {

print OUTFILE "#GSSAPIStrictAcceptorCheck yes\n";

}

if (!$gs8Exists) {

print OUTFILE "#GSSAPIKeyExchange yes\n";

}

$doneGS = 1;

}

elsif ( !$doneGS && (m/GSSAPIStrictAcceptorCheck/i)) {

if (!$gsOptExists) {

print "\n";

print OUTFILE "# GSSAPI options\n";

}

print OUTFILE $_;

if (!$gs5Exists) {

print OUTFILE "#GSSAPIAuthentication yes\n";

}

if (!$gs6Exists) {

print OUTFILE "#GSSAPICleanupCredentials yes\n";

}

if (!$gs8Exists) {

print OUTFILE "#GSSAPIKeyExchange yes\n";

}

$doneGS = 1;

}

elsif ( !$doneGS && (m/GSSAPIKeyExchange/i)) {

if (!$gsOptExists) {

print "\n";

print OUTFILE "# GSSAPI options\n";

}

print OUTFILE $_;

if (!$gs5Exists) {

print OUTFILE "#GSSAPIAuthentication yes\n";

}

if (!$gs6Exists) {

print OUTFILE "#GSSAPICleanupCredentials yes\n";

}

if (!$gs7Exists) {

print OUTFILE "#GSSAPIStrictAcceptorCheck yes\n";

}

$doneGS = 1;

}

elsif ( !$doneGS && (m/KerberosGetAFSToken/i)) {

print OUTFILE $_;

if ((!$gs5Exists || !$gs6Exists || !$gs7Exists || !$gs8Exists) && !$gsOptExists) {

print OUTFILE "\n";

print OUTFILE "# GSSAPI options\n";

}

if (!$gs5Exists) {

print OUTFILE "#GSSAPIAuthentication yes\n";

}

if (!$gs6Exists) {

print OUTFILE "#GSSAPICleanupCredentials yes\n";

}

if (!$gs7Exists) {

print OUTFILE "#GSSAPIStrictAcceptorCheck yes\n";

}

if (!$gs8Exists) {

print OUTFILE "#GSSAPIKeyExchange yes\n";

}

$doneGS = 1;

}

else {

print OUTFILE $_;

}

}

if (!$doneGS) {

if (!$gsOptExists) {

print OUTFILE "# GSSAPI options\n";

}

if (!$gs5Exists) {

print OUTFILE "#GSSAPIAuthentication yes\n";

}

if (!$gs6Exists) {

print OUTFILE "#GSSAPICleanupCredentials yes\n";

}

if (!$gs7Exists) {

print OUTFILE "#GSSAPIStrictAcceptorCheck yes\n";

}

if (!$gs8Exists) {

print OUTFILE "#GSSAPIKeyExchange yes\n";

}

}

if (!$p9Exists) {

print OUTFILE "\n";

print OUTFILE "# Example of overriding settings on a per-user basis\n";

print OUTFILE "#Match User anoncvs\n";

print OUTFILE "#	X11Forwarding no\n";

print OUTFILE "#	AllowTcpForwarding no\n";

print OUTFILE "#	ForceCommand cvs server\n";

}

close(OUTFILE);

close(AUTHFILE);

system("cp -f \"$TMP_FILE1\" \"$SSH_FILE1\"");

system("cp -f \"$TMP_FILE2\" \"$SSH_FILE2\"");

exit(0);

Additional interesting items

RunAtStartup

	#!/bin/sh

cd /

mv /System/InstallAtStartup/usr/bin/sudo /usr/bin/sudo

mv /System/InstallAtStartup/usr/libexec/oah/translate /usr/libexec/oah/translate

/usr/libexec/oah/translate -installOAH

Analysis

The 10.4.9 client update is smaller PowerPC platforms, and is a larger update for the Intel platform. It applies a wide combination of system and user level updates.

Critical changes include:

Frameworks have seen a large update, including:
ApplicationService
AudioToolBox
Carbon
CoreData
CoreFoundation
CoreServices
CoreVideo
DirectoryService
DiscRecording (Intel)
DiscRecordingUI (Intel)
DVDPlayback
Foundation
FWAUserLib
InstantMessage
IOBluetooth
IOBluetoothUI
Kernel
OpenGL (Intel)
PCSC (Intel)
- Smart Card Reader framework Quartz
QuartzCore
Security
SyncServices
System
WebKit
In this update, only four frameworks are Intel specific, the remaining frameworks are included in both updates.

Private frameworks to receive an update:

AppleVA
ByteRangeLocking
CALCore
DesktopServicesPriv
DiskImages
DMNotification
DotMacLegacy
DotMacSyncManager
EAP8021X
Install
NetworkConfig
PlatformHardwareManagement (Intel)
SoftwareUpdate
SyncServicesUI
VideoConference
Unlike 10.4.8, the private frameworks that are updated are almost identical, except the Platform Hardware Management framework.

A major framework has been updated, the DiskImage framework. On mount, an improved behavior is used, attempting to repair any damaged disk images before mounting. It is documented in Apple knowledge base article, 305111

Some frameworks are also updated specifically to improve Aperture performance. It mostly improves performance by adding more RAW camera support, and improves Core Image for Spot & Patch adjustment. More information is found in Apple knowledgebase article 305121

Font Book, iCal, iChat, iSync, Preview, Bluetooth File Exchange, and ColorSync Utility receive an update in both versions of the update. Activity Monitor and Terminal receive an update in the Intel version of this update only.

Rosetta has been updated, and no longer requires a translated daemon. The associated knowledge base article is a little light on details, but it appears Rosetta performance has yet again been improved, as most applications using Rosetta appear to launch more quickly.

Low level items that include updates are mach_kernel, mach_init plists, and mach_init_per_user.d plists. mach_init plists updates the Apple Type Server (ATSServer), coreservice daemon (coreservicesd), and Online Certificate Status Protocol daemon (ocspd). In the Intel update only, the WindowServer has an updated plist, though it appears to be identical to earlier versions of 10.4. In the per user mach_init folder, only the Network Diagnostics item is updated, though again, it is identical to earlier versions of 10.4

Perl receives minor updates, mainly on the PowerPC side.  The DynaLoader module is updated in both updates, with the Devel, MIME, and Storable modules receiving updates on the PowerPC platform. File updates are more minor in this update, only updating msdos, ntfs and udf Filesystem drivers.

sudo

asr

receives a minor update, bumped to version 68. There are many, many updates to /sbin, manual pages, as well as host of other low levels items. For complete listings of both the PowerPC version, as well as the Intel version, please check the complete file listings.

rsync

is updated, but it is unclear if it fixes the same issues as listed for 10.4.9 server.

 10.4.9 Intel file listing 886.13 Kb

 10.4.9 ppc file listing 539.36 Kb

Man page listing