A quick warning for those of you running Tiger Server: the latest security update edits the LaunchDaemon plist for named (BIND/DNS), relocating it from /usr/bin to /usr/sbin. However, at the same time, it disables it.
That means that, after install and restart, your DNS server will not work: you'll need to turn it back on using launchctl or the Server Admin tool.
Update
No sooner said than patched!