diff --git a/net/unbound/Makefile b/net/unbound/Makefile
index 189d5e292..2194cb4d4 100644
--- a/net/unbound/Makefile
+++ b/net/unbound/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=unbound
-PKG_VERSION:=1.4.16
+PKG_VERSION:=1.4.17
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=http://www.unbound.net/downloads
-PKG_MD5SUM:=5158d03d2ab0a8e60925c7a9b9903631
+PKG_MD5SUM:=812d49064a78c92765970a1364736da7
 
 PKG_BUILD_DEPENDS:=libexpat
 PKG_BUILD_PARALLEL:=1
@@ -105,6 +105,7 @@ define Package/libunbound/description
 endef
 
 CONFIGURE_ARGS += \
+	--disable-ecdsa \
 	--disable-gost \
 	--enable-allsymbols \
 	--with-ldns="$(STAGING_DIR)/usr" \
diff --git a/net/unbound/patches/001-conf.patch b/net/unbound/patches/001-conf.patch
index be12a0611..4ada6e060 100644
--- a/net/unbound/patches/001-conf.patch
+++ b/net/unbound/patches/001-conf.patch
@@ -124,7 +124,7 @@
  
  	# Harden against out of zone rrsets, to avoid spoofing attempts. 
  	# harden-glue: yes
-@@ -321,7 +342,7 @@ server:
+@@ -328,7 +349,7 @@ server:
  	# you start unbound (i.e. in the system boot scripts).  And enable:
  	# Please note usage of unbound-anchor root anchor is at your own risk
  	# and under the terms of our LICENSE (see that file in the source).
@@ -133,7 +133,7 @@
  
  	# File with DLV trusted keys. Same format as trust-anchor-file.
  	# There can be only one DLV configured, it is trusted from root down.
-@@ -407,15 +428,18 @@ server:
+@@ -414,15 +435,18 @@ server:
  	# the amount of memory to use for the key cache.
  	# plain value in bytes or you can append k, m or G. default is "4Mb". 
  	# key-cache-size: 4m