diff --git a/ChangeLog b/ChangeLog
index 1ac54fdb..7d7ba1a9 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,4 @@
-* 2015-09-??: Version 0.3.3
+* 2015-09-09: Version 0.3.3
   * Fix clearing upstream events on shutdown
   * Fix dnssec validation of direct CNAME queries.
     Thanks Simson L. Garfinkel.
diff --git a/configure.ac b/configure.ac
index 342ff15e..9630e37a 100644
--- a/configure.ac
+++ b/configure.ac
@@ -35,8 +35,8 @@ sinclude(./m4/acx_openssl.m4)
 sinclude(./m4/ax_check_compile_flag.m4)
 sinclude(./m4/pkg.m4)
 
-AC_INIT([getdns], [0.3.2], [stub-resolver@verisignlabs.com], [], [https://getdnsapi.net])
-AC_SUBST(RELEASE_CANDIDATE, [rc1])
+AC_INIT([getdns], [0.3.3], [stub-resolver@verisignlabs.com], [], [https://getdnsapi.net])
+AC_SUBST(RELEASE_CANDIDATE, [])
 
 # Set current date from system if not set
 AC_ARG_WITH([current-date],
@@ -46,7 +46,7 @@ AC_ARG_WITH([current-date],
   [CURRENT_DATE="`date -u +%Y-%m-%dT%H:%M:%SZ`"])
 
 AC_SUBST(GETDNS_VERSION, ["AC_PACKAGE_VERSION$RELEASE_CANDIDATE"])
-AC_SUBST(GETDNS_NUMERIC_VERSION, [0x00030201])
+AC_SUBST(GETDNS_NUMERIC_VERSION, [0x00030300])
 AC_SUBST(API_VERSION, ["July 2015"])
 AC_SUBST(API_NUMERIC_VERSION, [0x07df0700])
 GETDNS_COMPILATION_COMMENT="AC_PACKAGE_NAME $GETDNS_VERSION configured on $CURRENT_DATE for the $API_VERSION version of the API"
@@ -72,7 +72,7 @@ GETDNS_COMPILATION_COMMENT="AC_PACKAGE_NAME $GETDNS_VERSION configured on $CURRE
 # getdns-0.3.0 had libversion 3:3:2
 # getdns-0.3.1 had libversion 3:4:2
 # getdns-0.3.2 had libversion 3:5:2
-# getdns-0.3.3 will have libversion 3:6:2
+# getdns-0.3.3 has libversion 3:6:2
 #
 GETDNS_LIBVERSION=3:6:2
 
diff --git a/src/dnssec.c b/src/dnssec.c
index e5cc4a4a..859b942d 100644
--- a/src/dnssec.c
+++ b/src/dnssec.c
@@ -1075,7 +1075,6 @@ static void add_question2val_chain(struct mem_funcs *mf,
 
 	q_rrset.rr_type  = qtype;
 	if (!(rr = rrtype_iter_init(&rr_spc, &q_rrset))) {
-
 		/* No answer for the question.  Add a head for this rrset
 		 * anyway, to validate proof of non-existance, or to find
 		 * proof that the packet is insecure.